IAPP Exam CIPT Topic 7 Question 75 Discussion

Actual exam question for IAPP's CIPT exam

Question #: 75
Topic #: 7

[All CIPT Questions]

To meet data protection and privacy legal requirements that may require personal data to be disposed of or deleted when no longer necessary for the use it was collected, what is the best privacy-enhancing solution a privacy technologist should recommend be implemented in application design to meet this requirement?

AImplement a process to delete personal data on demand and maintain records on deletion requests.

BImplement automated deletion of off-site backup of personal data based on annual risk assessments.

CDevelop application logic to validate and purge personal data according to legal hold status or retention schedule.

DSecurely archive personal data not accessed or used in the last 6 months. Automate a quarterly review to delete data
from archive once no longer needed.

Show Suggested Answer

Suggested Answer: B

an alternative technique to counter the reduction in use of third-party cookies, where web publishers may consider utilizing data cached by a browser and returned with a subsequent request from the same resource to track unique users is called browser fingerprinting.

by Beatriz at Nov 22, 2023, 01:07 PM

Limited Time Offer

25%

Off

Get Premium CIPT Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Sabina

1 days ago

Option C seems like the most comprehensive and legally compliant solution. Validating and purging personal data based on legal hold or retention schedule is key.

upvoted 0 times

...

Raylene

5 days ago

I think option C could also be a good solution, developing application logic to validate and purge personal data based on legal hold status or retention schedule.

upvoted 0 times

...

Colette

7 days ago

I agree with King. It's important to have a clear process in place for deleting personal data when it's no longer needed.

upvoted 0 times

...

King

8 days ago

I think the best solution would be to implement a process to delete personal data on demand and maintain records on deletion requests.

upvoted 0 times

...