IAPP CIPM Quiz 1 Topic 7 Questions 1-5

Question: 1

As a Data Protection Officer, one of your roles entails monitoring changes in laws and regulations and updating policies accordingly.

How would you most effectively execute this responsibility?

AConsult an external lawyer.

BRegularly engage regulators.

CAttend workshops and interact with other professionals.

DSubscribe to email list-serves that report on regulatory changes.

Show Answer

Question: 2

In a sample metric template, what does ''target'' mean?

AThe suggested volume of data to collect

BThe percentage of completion

CThe threshold for a satisfactory rating

DThe frequency at which the data is sampled

Show Answer

Question: 3

Data retention and destruction policies should meet all of the following requirements EXCEPT?

AData destruction triggers and methods should be documented.

BPersonal information should be retained only for as long as necessary to perform its stated purpose.

CDocumentation related to audit controls (third-party or internal) should be saved in a non-permanent format by default.

DThe organization should be documenting and reviewing policies of its other functions to ensure alignment (e.g. HR, business development, finance, etc.).

Show Answer

Question: 4

What does it mean to ''rationalize'' data protection requirements?

AEvaluate the costs and risks of applicable laws and regulations and address those that have the greatest penalties

BLook for overlaps in laws and regulations from which a common solution can be developed

CDetermine where laws and regulations are redundant in order to eliminate some from requiring compliance

DAddress the less stringent laws and regulations, and inform stakeholders why they are applicable

Show Answer

Question: 5

In a sample metric template, what does ''target'' mean?

AThe suggested volume of data to collect

BThe percentage of completion

CThe threshold for a satisfactory rating

DThe frequency at which the data is sampled

Show Answer

IAPP CIPM Quiz:1 Topic:7 Questions:1-5