CDPSE Governance Frameworks 2

Question 1

Which governance principle requires that individuals responsible for privacy decisions be held answerable for their actions and outcomes?

Accepted Answer

Accountability

Answer

Accountability is the governance principle requiring that decision-makers are answerable for how personal data is handled.

Question 2

A privacy governance framework should include which of the following as a primary component for managing third-party data processors?

Accepted Answer

Data Processing Agreements (DPAs) with contractual privacy obligations

Answer

DPAs are the contractual mechanism requiring third-party processors to uphold the controller's privacy obligations.

Question 3

In a multinational organization, which governance structure best ensures consistent privacy practices across all jurisdictions?

Accepted Answer

A federated model with global standards and local compliance adaptations

Answer

A federated model balances global consistency with the flexibility to meet jurisdiction-specific requirements.

Question 4

Which element of privacy governance ensures that personal data is only used for the purposes for which it was originally collected?

Accepted Answer

Purpose limitation

Answer

Purpose limitation restricts the use of personal data to the specific, stated purposes communicated at collection.

Question 5

A company's privacy governance framework lacks defined escalation paths for privacy incidents. What risk does this create?

Accepted Answer

Delayed breach response and regulatory notification failures

Answer

Without escalation paths, incidents may not reach decision-makers in time to meet regulatory breach notification deadlines.

CDPSE - Certified Data Privacy Solutions Engineer Practice Test