CDPSE Data Lifecycle Management 2

Question 1

An organization collects customer email addresses for order confirmations but later uses them for marketing newsletters. This violates which data lifecycle principle?

Accepted Answer

Purpose limitation

Answer

Purpose limitation requires that personal data collected for a specific purpose must not be used for incompatible secondary purposes without a new legal basis.

Question 2

Which technique renders personal data permanently unusable by removing all direct and indirect identifiers?

Accepted Answer

Anonymization

Answer

Anonymization irreversibly removes all identifying information so that re-identification is not reasonably possible, taking the data outside the scope of most privacy regulations.

Question 3

A company stores personal data on decommissioned server hard drives in a locked warehouse. What is the MAIN privacy risk?

Accepted Answer

Unauthorized physical access leading to data recovery

Answer

Retaining unwiped storage media creates a risk that data could be physically accessed and recovered using forensic tools.

Question 4

Under the CDPSE framework, who bears primary accountability for defining data retention policies?

Accepted Answer

Data owner or business unit responsible for the data

Answer

The data owner is accountable for determining how long data must be retained to meet business and regulatory requirements.

Question 5

What is the privacy risk of keeping personal data in test and development environments?

Accepted Answer

Exposure of live personal data in less-controlled environments

Answer

Dev and test environments typically have weaker security controls than production, so using real personal data risks unauthorized exposure.

CDPSE - Certified Data Privacy Solutions Engineer Practice Test

CDPSE - Certified Data Privacy Solutions Engineer Practice Test

CDPSE Data Lifecycle Management 2