What is a risk of handling personal data, and how can it be mitigated?

• A. Data breach risk
• B. Data breach risk mitigated by access controls
• C. Data breach risk mitigated by encryption
• D. All of the above

Answer: (D)

Handling personal data carries the risk that unauthorized people could access or leak information. This risk can be reduced in several ways. Access controls limit who can view or handle the data, so fewer people have the opportunity to cause a breach. Encryption protects the data itself, making it unreadable to anyone who doesn’t have the key, so even if data is intercepted or improperly accessed, its contents aren’t usable. Since these measures address different parts of the problem—who can access the data and how the data remains unintelligible if accessed—using both together provides stronger protection. That’s why all of the above is the best answer: data breach risk exists and can be mitigated by both access controls and encryption.