CDPSE CDPSE 2

Question 1

An organization wants to implement data minimization. Which approach BEST achieves this principle?

Accepted Answer

Collect only the data strictly necessary for the specified purpose

Answer

Data minimization means collecting only what is necessary for the defined purpose, reducing privacy risk at the source.

Question 2

Which technical control BEST enforces purpose limitation for personal data stored in a database?

Accepted Answer

Role-based access control tied to processing purposes

Answer

RBAC tied to processing purposes ensures users and systems can only access personal data for authorized, defined purposes.

Question 3

A company processes health data under a research exemption. What privacy control is MOST critical to implement?

Accepted Answer

Pseudonymization of the health data before analysis

Answer

Pseudonymization reduces re-identification risk while still enabling legitimate research under many privacy frameworks.

Question 4

Under GDPR, a Data Protection Officer (DPO) reports a data breach to the supervisory authority 80 hours after discovery. What is the consequence?

Accepted Answer

The notification is late since GDPR requires 72 hours

Answer

GDPR Article 33 requires notification to the supervisory authority within 72 hours of becoming aware of a breach.

Question 5

Which Privacy Enhancing Technology (PET) allows computations on encrypted data without decrypting it?

Accepted Answer

Homomorphic encryption

Answer

Homomorphic encryption enables mathematical operations on ciphertext, so sensitive data never needs to be decrypted for processing.

CDPSE - Certified Data Privacy Solutions Engineer Practice Test