CIPM CIPM Data Subject Rights 1 — Questions and Answers
Question 1: What is the right to erasure also commonly known as under GDPR?
- Right to portability
- Right to be forgotten (Correct answer)
- Right to rectification
- Right to access
Correct answer: Right to be forgotten
The right to erasure is commonly called the 'right to be forgotten,' allowing individuals to request deletion of their personal data under GDPR Article 17.
Question 2: Under GDPR, within how many days must a data controller respond to a data subject access request (DSAR)?
- 14 days
- 30 days (Correct answer)
- 45 days
- 60 days
Correct answer: 30 days
GDPR requires data controllers to respond to DSARs within one month (approximately 30 days) of receiving the request.
Question 3: Which right allows individuals to move their personal data from one service provider to another?
- Right to rectification
- Right to restriction
- Right to data portability (Correct answer)
- Right to object
Correct answer: Right to data portability
The right to data portability allows individuals to receive their personal data in a machine-readable format and transfer it to another controller.
Question 4: What must an organization verify before fulfilling a data subject rights request?
- The subject's credit score
- The identity of the requestor (Correct answer)
- The subject's employment status
- The subject's country of residence
Correct answer: The identity of the requestor
Organizations must verify the identity of the person making a data subject rights request before fulfilling it to prevent unauthorized disclosure.
Question 5: Which right allows a data subject to request that processing be limited while the accuracy of their data is contested?
- Right to erasure
- Right to object
- Right to restriction of processing (Correct answer)
- Right to portability
Correct answer: Right to restriction of processing
The right to restriction of processing allows data subjects to limit how their data is processed, such as when they contest its accuracy or object to processing.
Question 6: Under CCPA, what term is used for the consumer right equivalent to GDPR's right to erasure?
- Right to opt-out
- Right to know
- Right to delete (Correct answer)
- Right to non-discrimination
Correct answer: Right to delete
The CCPA uses the term 'right to delete' for consumers to request deletion of their personal information collected by businesses.
CIPM CIPM Data Subject Rights 1
What is the right to erasure also commonly known as under GDPR?