---
title: "Short note: Privacy matters in CRM"
subject: "Data Mining"
chapter: 7
key: "semester_7/data_mining:crm-privacy-note"
source: https://www.bctengineer.com/q/semester_7/data_mining/crm-privacy-note
site: BCT Engineering
---

# Short note: Privacy matters in CRM

Data Mining · Chapter 7: Advanced Applications

- Asked in: year not given, 4 marks
- Video: [Data protection issues associated with CRM](https://www.youtube.com/watch?v=wJK8pcWR4L4) — adtube india
- Answer checked by Claude Opus 5.5 (high effort) on 2026-10-14
- Page: https://www.bctengineer.com/q/semester_7/data_mining/crm-privacy-note
- Whole chapter: https://www.bctengineer.com/md/semester_7/data_mining/chapter-7

## Question

Write a short note on Privacy Matters in CRM.

## Short answer

CRM privacy concerns include collection without consent, using data beyond its original purpose, profiling and inference of sensitive facts, security breaches, inaccurate data, unwanted contact and discrimination. Good practice requires informed consent, data minimisation, anonymisation, access control, audits and compliance with privacy laws.

## Answer

CRM stores detailed data about each customer: identity, contacts, purchases, payments, preferences, complaints and web behaviour. Using data mining on this data creates privacy concerns.

#### Main privacy matters
- **Collection without consent**: customers may not know what is collected, or how it is used (e.g. from cookies, loyalty cards, social media).
- **Purpose limitation**: data given for one purpose (billing) should not be used for another (marketing, selling to third parties) without permission.
- **Profiling and inference**: mining can reveal sensitive facts (health, income, religion, pregnancy) the customer never told.
- **Data security**: breaches, insider misuse, and loss of customer data.
- **Accuracy and access**: wrong data can harm customers; they have a right to see and correct their data.
- **Unwanted contact**: intrusive marketing and spam.
- **Discrimination**: treating customers differently (price or service) based on profiles.

#### Good practice
1. Privacy policy and **informed consent**, opt-in/opt-out choices.
2. Collect only needed data (**data minimisation**), keep it for a limited time.
3. **Anonymisation** and privacy-preserving mining.
4. Access control, encryption, audits.
5. Follow law (Nepal's Privacy Act, 2075; GDPR for EU customers).

Trust is important: customers will share data only if they believe it will be protected.

## Check yourself

The answer's key points as multiple-choice questions, with the correct option and why.

1. What does purpose limitation mean?
   A. Data collected for one purpose should not be used for another without permission
   B. Data must be stored forever
   C. Data may be sold once collected
   D. Only managers may see data
   Answer: A. E.g. data given for billing should not be used for marketing without consent. (Key point: Purpose limitation)

2. Why is profiling a privacy concern in CRM?
   A. Mining can reveal sensitive facts the customer never told
   B. It deletes customer data
   C. It makes data inaccurate by design
   D. It stops marketing
   Answer: A. Inference can expose health, income, religion, pregnancy etc. (Key point: Profiling)

3. Which is a customer right regarding accuracy?
   A. To see and correct their data
   B. To delete the company's database
   C. To change the privacy law
   D. To receive more marketing
   Answer: A. Wrong data can harm customers, so access and correction are needed. (Key point: Customer rights)

4. Which is good practice?
   A. Collect all possible data
   B. Collect only needed data and keep it for a limited time
   C. Share data freely with third parties
   D. Avoid privacy policies
   Answer: B. Data minimisation with limited retention reduces risk. (Key point: Good practice)

## Related in Data Mining

- [CRM; security and privacy of data mining](https://www.bctengineer.com/question.md?key=semester_7%2Fdata_mining%3Acrm-security-privacy) — Data Mining, chapter 7