Data Privacy
Data privacy is the protection and proper handling of personal or sensitive information according to legal, regulatory, and organizational requirements.
“The protection of personally identifiable information or otherwise sensitive information from undesired disclosure.”
(Definition reproduced from the ISTQB Glossary. Copyright belongs to ISTQB.)
View the complete ISTQB GlossaryWhat is Data Privacy?
Data privacy ensures that personal information is collected, stored, processed, and shared only for authorized purposes while respecting individual rights.
Personal information: Privacy focuses on how personal data is handled.
Regulatory compliance: Laws such as GDPR require appropriate privacy controls.
Testing focus: Verify privacy features and proper handling of personal information.
Real World Example
A telehealth company is preparing a staging environment so testers can exercise appointment booking and billing features before release.
The staging database was refreshed with a copy of production, which means real patient names, diagnoses, and insurance numbers are now sitting in an environment with weaker access controls. Data privacy is the concern because this personal information could be seen by people who have no clinical or business reason to view it.
The tester flags the refresh as a risk, requests that PII fields be masked or replaced with realistic synthetic data before testing begins, and separately verifies that error messages, logs, and exported reports never reveal unmasked patient details. The tester also checks that a marketing analytics export strips names, emails, and phone numbers before the data leaves the company's systems.
The team catches the exposure before testers or a data breach exposes real patients, because Data privacy was treated as a testable requirement rather than an assumption about how the environment "should" be handled.
Practice Questions
Question 1
A tester verifies that when customer records are exported to a marketing analytics vendor, all names, email addresses, and phone numbers are removed or masked so no individual can be identified. Which concept is being verified?
Question 2
Before loading a production database copy into a test environment, a tester recommends replacing real patient names, diagnoses, and national ID numbers with realistic but fictitious values. Which testing concern is the tester MOST directly addressing?
Test your knowledge with real ISTQB-style questions
You’ve learned Data Privacy. Test your understanding with topic-specific questions in our Mock Exams.