CDPSE Privacy Compliance and Auditing 2

Question 1

A privacy auditor reviews an organization's consent management system and finds that consent is bundled with terms of service. Which privacy principle is MOST likely violated?

Accepted Answer

Freely given consent

Answer

Valid consent under GDPR and similar frameworks must be freely given, meaning it cannot be bundled with terms of service in a way that makes it conditional on accepting unrelated terms.

Question 2

Which type of audit evaluates both the design and operating effectiveness of privacy controls?

Accepted Answer

Control effectiveness audit

Answer

A control effectiveness audit tests whether controls are both properly designed to address risks and actually operating as intended in practice over time.

Question 3

What is the MAIN purpose of a data protection audit trail?

Accepted Answer

To provide an immutable record of data access, modifications, and deletions for accountability and incident investigation

Answer

Audit trails record who accessed or modified personal data and when, supporting breach investigations, regulatory inquiries, and accountability requirements.

Question 4

An organization is preparing for a GDPR supervisory authority audit. Which document is MOST important to have readily available?

Accepted Answer

Record of Processing Activities (RoPA)

Answer

The RoPA is a mandatory GDPR document that supervisory authorities commonly request first, as it provides a comprehensive overview of all personal data processing activities.

Question 5

Which of the following is a key indicator of a mature privacy compliance program?

Accepted Answer

Regular privacy training, documented policies, and evidence of continuous monitoring and improvement

Answer

Maturity in privacy programs is characterized by systematic training, documented policies, ongoing monitoring, and a culture of continuous improvement rather than point-in-time efforts.

CDPSE - Certified Data Privacy Solutions Engineer Practice Test

CDPSE - Certified Data Privacy Solutions Engineer Practice Test

CDPSE Privacy Compliance and Auditing 2