CDPSE Data Lifecycle Management

Question 1

Which principle requires that personal data be kept only as long as necessary for its original collection purpose?

Accepted Answer

Storage limitation

Answer

The storage limitation principle, recognized in GDPR and other frameworks, mandates that personal data must not be retained beyond the period necessary for its specified purpose.

Question 2

What is the BEST method for ensuring that personal data is irreversibly destroyed at the end of its retention period?

Accepted Answer

Overwriting data with random bits multiple times

Answer

Cryptographic erasure or multi-pass overwriting renders data unrecoverable, meeting the standard for irreversible destruction under data protection regulations.

Question 3

A CDPSE candidate is designing a data retention schedule. Which factor is MOST critical to determine first?

Accepted Answer

Legal and regulatory retention requirements

Answer

Legal and regulatory requirements set the minimum and maximum retention periods that override business convenience or cost considerations.

Question 4

During which data lifecycle phase is the Privacy Impact Assessment (PIA) MOST effectively initiated?

Accepted Answer

Data collection phase

Answer

Initiating a PIA during the data collection design phase allows privacy risks to be mitigated before personal data is ever gathered.

Question 5

Which data lifecycle stage presents the HIGHEST risk of unauthorized re-identification?

Accepted Answer

Data disposal

Answer

Improper disposal—such as discarding unwiped storage media—can expose de-identified or supposedly deleted personal data to re-identification by unauthorized parties.

CDPSE - Certified Data Privacy Solutions Engineer Practice Test

CDPSE - Certified Data Privacy Solutions Engineer Practice Test

CDPSE Data Lifecycle Management