問題文
A retailer's data inventory lists a table of loyalty transactions as holding no personal data, because the customer column contains a store-issued card number. During a review an engineer finds that the card number is printed on the physical card the customer carries. What is the strongest reason to reclassify the table?
選択肢
- The table should be reclassified because transaction amounts are financial data, and financial data always counts as personal data.
- The entry should be reclassified because the inventory record is past its review date, and an overdue entry defaults to the highest classification until it is reviewed again.
- The transactions become personal data only when the retailer joins them with the membership table, so the classification is correct as long as no such join exists in the current reporting pipeline and the join is blocked at the query layer.
- The card number is an identifier that reaches the individual through the card itself, so the transactions are personal data even without a name in the table.