When a government's health division established the complete privacy regulation for only the health market, which privacy protection reference model is being used?

• A.Sectoral
• B.Comprehensive
• C.Self-regulatory
• D.Co-regulatory

Comment: *

Name: *

Email: *

Verification: *

A software development organization with remote personnel has implemented a third-party virtualized workspace to allow the teams to collaborate. Which of the following should be of GREATEST concern?

• A.The third-party workspace is hosted in a highly regulated jurisdiction.
• B.The organization's products are classified as intellectual property.
• C.There is a lack of privacy awareness and training among remote personnel.
• D.Personal data could potentially be exfiltrated through the virtual workspace.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is a PRIMARY objective of performing a privacy impact assessment (PIA) prior to onboarding a new Software as a Service (SaaS) provider for a customer relationship management (CRM) system?

• A.To determine the service provider's ability to maintain data protection controls
• B.To identify controls to mitigate data privacy risks
• C.To classify personal data according to the data classification scheme
• D.To assess the risk associated with personal data usage

Comment: *

Name: *

Email: *

Verification: *

In which of the following should the data record retention period be defined and established?

• A.Data management plan
• B.Data recovery procedures
• C.Data quality standard
• D.Data record model

Comment: *

Name: *

Email: *

Verification: *

Which of the following is MOST important to consider when managing changes to the provision of services by a third party that processes personal data?

• A.Changes to current information architecture
• B.Modifications to data quality standards
• C.Updates to data life cycle policy
• D.Business impact due to the changes

Comment: *

Name: *

Email: *

Verification: *