Which statement about data privacy and compliance is true?

• A. Data privacy obligations are optional for student projects.
• B. Complying with data privacy laws helps protect participants and avoid penalties.
• C. Data privacy concerns only large institutions.
• D. Data privacy has no relation to data collection.

Answer: (B)

Data privacy and compliance are about handling personal information responsibly throughout the data collection and processing lifecycle. The best statement reflects how following data privacy laws protects participants and also helps you avoid penalties. Laws outline how data can be collected, used, stored, and shared—covering consent, purpose limits, data minimization, security, retention, and accountability—and violations can lead to fines or other sanctions. This applies to any project that handles personal data, not just large institutions, and the responsibility to protect privacy grows with the amount and sensitivity of the data collected. Privacy concerns are inherently tied to data collection because the act of collecting data triggers duties to safeguard and use it appropriately. So, the idea that privacy obligations are optional or that privacy isn’t related to data collection doesn’t fit the reality of how these rules work.