Choose Your Reading Style
A professional-level summary covering key definitions, frameworks, and exam-relevant points.
DMBOK Context
The DAMA DMBOK v2 treats Data Privacy as a component of the Data Security knowledge area (approximately 6% of the CDMP exam). The DMBOK defines privacy as "the right of individuals to have their personal information protected from unauthorised access, use, or disclosure" and emphasises that privacy must be built into data management processes, not bolted on as an afterthought (Privacy by Design).
Key Privacy Regulations
| Regulation | Jurisdiction | Key Requirements |
|---|---|---|
| GDPR | European Union | Consent, data subject rights, DPO, 72-hour breach notification |
| CCPA/CPRA | California, USA | Right to know, right to delete, right to opt-out of sale |
| HIPAA | USA (healthcare) | Protected health information (PHI) safeguards |
| LGPD | Brazil | Similar to GDPR; consent, data subject rights |
| PDPA | Thailand, Singapore | Consent, purpose limitation, data subject rights |
Privacy by Design
Privacy by Design (PbD) is the principle that privacy should be embedded into the design of systems and processes from the outset, not added as an afterthought. The seven principles of PbD (developed by Ann Cavoukian) are: proactive not reactive, privacy as the default, privacy embedded into design, full functionality, end-to-end security, visibility and transparency, and respect for user privacy.
CDMP Exam Relevance
Privacy concepts appear in the Data Security knowledge area. Key exam topics: the distinction between privacy and security, the core privacy principles (especially purpose limitation and data minimisation), Privacy by Design, and the role of data governance in ensuring privacy compliance.