CIPT practice question 14 of 30
Users of a web-based email service have their accounts breached through compromised login credentials. Which possible consequences of the breach illustrate the two categories of Calo’s Harm Dimensions?
Full set: 220 questionsRyan Calo’s framework categorizes privacy harms into two dimensions: objective and subjective. Objective harms are tangible, observable injuries like financial loss or physical harm. Subjective harms are internal, emotional, or psychological injuries. "Identity theft" is an objective harm, as it leads to concrete financial and reputational damages. "Embarrassment" is a classic example of a subjective harm, representing emotional distress and a feeling of humiliation resulting from the exposure of private information. This pair perfectly illustrates the two distinct categories of Calo's harm dimensions.
A. Financial loss and blackmail are both objective harms, as they involve tangible loss or the threat of tangible consequences, failing to represent both of Calo's categories.
B. Financial loss is an objective harm, but solicitation is an action, not a harm itself. The resulting harm could be objective (a scam) or subjective (annoyance), making it less precise.
D. Identity theft is an objective harm, but "leaking of information" is the privacy breach event itself, not the resulting harm or consequence to the individual.
1. Calo, R. (2011). The Boundaries of Privacy Harm. Indiana Law Journal, 86(3), Article 1. pp. 1131-1162. Calo explicitly distinguishes between "subjective harms (i.e., the anxiety or emotional distress that can accompany a privacy violation)" and "objective harms (i.e., concrete injuries like financial loss or unwelcome solicitation)."
2. Solove, D. J. (2006). A Taxonomy of Privacy. University of Pennsylvania Law Review, 154(3), 477-560. https://doi.org/10.2307/40041279. While not Calo's work, Solove's taxonomy complements it by detailing how information collection and processing can lead to harms like "distortion" (embarrassment) and "insecurity" (identity theft).
3. Nissenbaum, H. (2009). Privacy in Context: Technology, Policy, and the Integrity of Social Life. Stanford University Press. Chapter 4 discusses how privacy violations can lead to a range of harms, both tangible and intangible, aligning with Calo's objective/subjective dichotomy.
Keep practicing
Take the free CIPT practice test
Ten exam-style questions with answers and explanations, plus the exam facts and study guides.
More questions
Other CIPT practice questions
- Question 1Not updating software for a system that processes human resources data with the latest se…
- Question 2There are two groups of users. In a company, where one group Is allowed to see credit car…
- Question 3What can be used to determine the type of data in storage without exposing its contents?
- Question 4Which privacy engineering objective proposed by the US National Institute of Science and …
- Question 5SCENARIO Looking back at your first two years as the Director of Personal Information Pro…
- Question 6SCENARIO Carol was a U.S.-based glassmaker who sold her work at art festivals. She kept t…
