TechKnowSurge
CompTIA Security+ 5.4 ISC2 CISSP 1.4
TechKnowSurge Catalog Interactives Which Privacy Right?
InteractiveSecurityFree

Which Privacy Right?

See it, delete it, move it, stop it, allow it, be told about it, or follow the law of where it came from: name the privacy right.

⚑ Complete this interactive to capture a CTF flag worth 5 points.

About this interactive

Privacy is being free from being observed or disturbed. Laws differ from country to country in what they call each right and how far it goes, so this activity uses the general meanings the lesson teaches. Right to access: the data subject can ask what an organization holds about them, and see it. Right to be forgotten: the data subject can ask for their data to be deleted. It has a limit: where a law requires a record to be kept for a set time, that record stays. Data portability: the data subject can have their data moved to another service provider. Opt-out: something is already happening with the data, such as selling it or sending marketing, and the data subject tells the organization to stop. Consent: the stricter rule. The organization may not collect, sell or contact at all until the data subject has said yes. Breach notification: if the data is stolen, the people it is about have a right to be told. Data sovereignty: data falls under the laws of the place it is collected from, so an organization based in one country follows another country's rules for the data it collects there. To sort a card, ask what the person can make the organization do, or what the organization is bound by.

What you'll learn

Aligned to

CompTIA Security+
5.4 Summarize elements of effective security compliance.
ISC2 CISSP
1.4 Understand legal, regulatory, and compliance issues that pertain to information security in a holistic context

Key terms

Right to Access
A consumer right that allows individuals to request and view the personal data an organization has collected about them.
Right to Be Forgotten
A regulatory right that allows data subjects to request the deletion of their personal data from an organization's records.
Data Portability
A consumer right that allows individuals to have their personal data transferred from one service provider to another.
Consent
A privacy principle requiring that organizations obtain explicit permission from individuals before collecting, using, or sharing their personal data.
Data Sovereignty
The concept that data is subject to the laws and regulations of the geographic region in which it originates or is collected.
Breach Notification
The legal obligation for a data collector to inform data subjects when their personal data has been compromised in a security incident.
Data Privacy
The principle and practice of ensuring that personal information is collected, stored, and used in accordance with applicable laws and individual rights.
Data Subject
An individual whose personal data is being collected and processed by another party.

Topics

Privacy Data Subject Rights Compliance Interactive Categorize

About TechKnowSurge

TechKnowSurge builds IT and cybersecurity professionals through hands-on, concept-first training built around real understanding — not memorization. Free interactive tools, structured programs, and 25+ years of real-world experience, all in one place.

Explore free tools and programs →