問題文
A construction firm's scheme has a level for confidential data and a separate marker for personal data. An engineer argues the two should be merged because personal data is always confidential. Which reasoning is sounder?
選択肢
- Merge them into a single scale, because two labels on the same field invite inconsistency and engineers will eventually set one without the other, and a single ordered scale can express both concerns as long as the personal data categories are placed at the higher end of that scale where the strictest handling rules apply.
- Keep them separate but derive the confidentiality level automatically from the personal data marker.
- Merge them and drop the personal data marker, because the confidentiality level already triggers the strictest controls, which cover reading, retention, and disposal at that level.
- Keep them separate, because the confidentiality level drives who may read it while the personal data marker drives obligations such as retention, deletion, and answering requests.