CDPSE Data Lifecycle Management 3

Question 1

What is a Record of Processing Activities (RoPA) primarily used for?

Accepted Answer

Documenting all personal data processing operations within an organization

Answer

A RoPA is a compliance document required under GDPR Article 30 that records the purposes, categories, and flows of all personal data processing activities.

Question 2

Which of the following BEST describes 'data provenance' in the context of privacy?

Accepted Answer

The origin and chain of custody of data throughout its lifecycle

Answer

Data provenance tracks where data came from, how it was transformed, and who handled it, supporting accountability and auditability.

Question 3

An organization wants to repurpose customer purchase history for an AI training dataset. What privacy step must occur FIRST?

Accepted Answer

Assess whether the new use is compatible with the original collection purpose

Answer

A compatibility assessment and, if needed, obtaining a new legal basis or fresh consent is required before data can be repurposed for a materially different use.

Question 4

Which sanitization standard is MOST commonly referenced for the secure disposal of US government data on magnetic media?

Accepted Answer

NIST SP 800-88

Answer

NIST SP 800-88 'Guidelines for Media Sanitization' provides the authoritative US standard for clearing, purging, and destroying data on various media types.

Question 5

What does a data retention legal hold require an organization to do?

Accepted Answer

Suspend normal retention schedules and preserve relevant data for legal proceedings

Answer

A legal hold overrides standard deletion schedules, requiring organizations to preserve all potentially relevant data until the legal matter is resolved.

CDPSE - Certified Data Privacy Solutions Engineer Practice Test

CDPSE - Certified Data Privacy Solutions Engineer Practice Test

CDPSE Data Lifecycle Management 3