Which of the following BEST enables an IT privacy practitioner to ensure appropriate protection for personal data collected that is required to provide necessary services?

• A.Implementing strong access controls on a need-to-know basis
• B.Encrypting the data throughout its life cycle
• C.Understanding the data flows within the organization
• D.Anonymizing privacy data during collection and recording

Comment: *

Name: *

Email: *

Verification: *

Which of the following should be of GREATEST concern when an organization wants to store personal data in the cloud?

• A.The data security policies and practices of the storage provider
• B.Any vulnerabilities identified in the cloud system
• C.The data recovery capabilities of the storage provider
• D.The organization's potential legal liabilities related to the data

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the BEST way to protect personal data in the custody of a third party?

• A.Have corporate counsel monitor privacy compliance.
• B.Require the third party to provide periodic documentation of its privacy management program.
• C.Include requirements to comply with the organization's privacy policies in the contract.
• D.Add privacy-related controls to the vendor audit plan.

Comment: *

Name: *

Email: *

Verification: *

Data collected by a third-party vendor and provided back to the organization may not be protected according to the organization's privacy notice. Which of the following is the BEST way to address this concern?

• A.Re-assess the information security requirements.
• B.Review the privacy policy.
• C.Validate contract compliance.
• D.Obtain independent assurance of current practices.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is MOST likely to present a valid use case for keeping a customer's personal data after contract termination?

• A.A forthcoming campaign to win back customers
• B.Ease of onboarding when the customer returns
• C.For the purpose of medical research
• D.A required retention period due to regulations

Comment: *

Name: *

Email: *

Verification: *