Topic module

Privacy, Security, Ethics and Controls

This topic covers access control, privacy, sensitive data, masking, anonymization, retention, compliance, ethical analysis, bias, and responsible data use.

Long-form learning
Concept to Risk to Memory to Check-up

How to study for CompTIA Data+

Treat each Data+ item as an analytics decision: identify the source, quality issue, transformation, statistic, visual, audience, and control.

Core concepts

Concept 1

Data controls should protect confidentiality, integrity, availability, privacy, and appropriate use.

Exam cue: Protect sensitive data with access, masking, retention, and audit controls.

Concept 2

Sensitive data requires access limits, masking, anonymization, retention controls, and auditability.

Exam cue: Apply privacy and consent requirements before sharing data.

Concept 3

Ethical analysis considers bias, fairness, transparency, consent, and potential harm.

Exam cue: Check bias, fairness, and potential harm before publishing results.

Risk pitfalls and guardrails

Sharing row-level sensitive data when aggregate results would satisfy the need.

Guardrail: Avoid answers that skip profiling, overclaim causation, hide limitations, choose misleading visuals, or expose sensitive data.

Assuming anonymized data can never be reidentified.

Guardrail: Avoid answers that skip profiling, overclaim causation, hide limitations, choose misleading visuals, or expose sensitive data.

Ignoring bias because a calculation is technically correct.

Guardrail: Avoid answers that skip profiling, overclaim causation, hide limitations, choose misleading visuals, or expose sensitive data.

Memory anchors

Access Control

Access control limits who can view, change, approve, or distribute data.

PII

Personally identifiable information can identify, contact, or distinguish an individual.

Data Masking

Data masking hides sensitive values while preserving a usable structure.

Anonymization

Anonymization removes or transforms identifiers to reduce reidentification risk.

Retention

Retention defines how long data should be kept before archive or deletion.

Audit Log

An audit log records data access or changes for accountability and investigation.

Consent

Consent records whether a person agreed to a data use under defined conditions.

Bias

Bias can distort data collection, analysis, models, or interpretation.

Data Ethics

Data ethics considers fairness, transparency, privacy, and potential harm.

Least Privilege

Least privilege grants only the data access needed for the approved task.

Checkpoint rule

Do the check-up only after you can summarize each concept in one sentence and identify one dangerous pitfall from memory.

Knowledge Check (after reading)

Short check-up to confirm understanding of this module.

Check-up Questions

1-2 question checkpoint

A shared analytics file contains names, email addresses, and government identifiers. What should the analyst do FIRST? Use only the facts stated.

A churn model needs account tenure and usage but not customer names or full addresses. Which action best addresses the requirement? Use only the facts stated.

Answer all questions to submit.

Next step personalized recommendations

What is Pass Harbor?

Completely free exam prep for 317 U.S. exams.

  • Practice questions
  • Flashcards
  • Study guides
  • Mock exams
  • No registration
  • No paywall
  • Start instantly
No more expensive exam prep. Quality study tools should be accessible to everyone.