Chapter 50 — Final defense | Engineering Privacy and data protection

Open, free learning for anyone who wants to protect people and technology. No account is required to read this text or its worked answers.

Chapter 50 — Final defense

Lesson map

Lesson 50 published. Map, example, EX148.

flowchart TD
  N0["Learning outcomes"]
  N1["50.1 Preparing"]
  N2["50.2 The defense"]
  N3["50.3 Professional development"]
  N4["50.4 Looking back"]
  N5["Synthesis"]
  N0 --> N1 --> N2 --> N3 --> N4 --> N5
  N5 --> EX["Worked example"]
  EX --> Q["Exercise EX148"]

Logical drawing

flowchart LR
  N0["Learning outcomes"]
  N1["50.1 Preparing"]
  N2["50.2 The defense"]
  N3["50.3 Professional development"]
  N4["50.4 Looking back"]
  N5["Synthesis"]
  N0 --> N1 --> N2 --> N3 --> N4 --> N5 --> Q["EX148"]

[Learning outcomes]
    |
    v
[50.1 Preparing]
    |
    v
[50.2 The defense]
    |
    v
[50.3 Professional development]
    |
    v
[50.4 Looking back]
    |
    v
[Synthesis]
    |
    v
[Worked example] --> [Exercise EX148]

Learning outcomes

You will (1) defend an engineering thesis; (2) answer questions on law, design and verification; (3) plan professional development.

50.1 Preparing

Zara prepares for the final defense by listing likely questions in three groups: legal (why is the lawful basis for research appropriate?), design (why templates instead of a query language?) and verification (how do you know the noise generator is correct?). She rehearses concise answers with evidence references. Prof. Holm conducts a mock defense and pushes her on the limits of synthetic testing. She practises saying what she would do next to address each limit, rather than defending the limit itself. Rehearsals are recorded.

50.2 The defense

At the defense the examiners ask about the opt-out timing finding from the design review. Zara explains the cache problem and the decision to rerun studies without caching. They ask whether differential privacy guarantees hold if templates change. She explains that each new template needs sensitivity analysis and review, which the governance process requires. They ask about vendor dependence, and she cites the breach exercise and the new twelve-hour notification clause. The examiners pass the thesis and commend the evidence dossier. The examiners ask for no changes.

50.3 Professional development

After the defense Zara writes a development plan. She wants to deepen her knowledge of formal privacy accounting, gain experience with supervisory authority interactions and learn more about health law beyond the GDPR and LGPD. She notes that ISO/IEC 27701:2025 certification audits would give her practical experience with management systems. She also plans to mentor first-year students in privacy unit testing, completing the circle that began with her own first programming assignment five years earlier. Pellmore offers her a privacy engineering role, which she accepts after the defense.

50.4 Looking back

Zara looks back on five years. The foundations, from calculus to cryptography, each gave her tools for privacy problems. The middle years taught her to turn law into requirements and requirements into tested systems. The final years taught her to work with people, evidence and limits. She concludes that privacy engineering is not a specialism added at the end but a way of building systems responsibly from the start. Pellmore offers her a role in its privacy engineering team, which she accepts.

Worked example

Zara defends opt-out timing, template sensitivity and vendor dependence, passes with commendation for the dossier and plans development in formal accounting, regulatory work and mentoring.

Synthetic case. The defense and job offer are synthetic; ISO/IEC 27701:2025 is real.

Errors and limits

A passed defense is not the end of learning; practice will expose new gaps.

Exercises

EX148 — Template guarantee. How are guarantees maintained when templates change? Rubric: 3 = each new template needs sensitivity analysis and review;; 2 = mentions review;; 1 = automatic;; 0 = none.
EX149 — Vendor answer. What evidence did Zara cite on vendor dependence? Rubric: 3 = the breach exercise and the twelve-hour notification clause;; 2 = one;; 1 = vague;; 0 = none.
EX150 — Course conclusion. What does Zara conclude about privacy engineering? Rubric: 3 = it is a way of building systems responsibly from the start, not an add-on;; 2 = mentions design;; 1 = specialism;; 0 = none.

Synthesis

Chapter 50 completes the engineering route. The worked results follow, then the references.

Continue studying — chapter 50 of 50

← Chapter 49 (draft) · Course chapter index · Worked results ↓ · Next course via chapter index →