CDPSE CDPSE 3

Question 1

Which element is MOST important when designing a consent management platform?

Accepted Answer

Granular consent per purpose with easy withdrawal

Answer

Valid consent under GDPR must be granular, freely given, and as easy to withdraw as to give.

Question 2

A CDPSE is reviewing a vendor contract for cloud data processing. What privacy clause is MOST critical to include?

Accepted Answer

A Data Processing Agreement (DPA) specifying controller obligations

Answer

A Data Processing Agreement is legally required under GDPR when a controller engages a processor, defining each party's data protection obligations.

Question 3

What does the concept of 'privacy by default' require?

Accepted Answer

Applying maximum privacy settings automatically without user action

Answer

Privacy by default means the most privacy-protective settings are applied automatically, so individuals don't need to take action to protect their privacy.

Question 4

An organization processes data based on legitimate interests. Which step is REQUIRED before relying on this lawful basis?

Accepted Answer

Conduct a Legitimate Interests Assessment (LIA)

Answer

A Legitimate Interests Assessment balances the organization's interests against data subjects' rights and must be documented before relying on legitimate interests.

Question 5

Which data lifecycle phase presents the HIGHEST privacy risk if not properly managed?

Accepted Answer

Data retention beyond stated purpose

Answer

Retaining data longer than necessary violates storage limitation principles and increases exposure to breaches, legal liability, and unauthorized use.

CDPSE - Certified Data Privacy Solutions Engineer Practice Test

CDPSE - Certified Data Privacy Solutions Engineer Practice Test

CDPSE CDPSE 3