CIPM CIPM Data Subject Rights

Question 1

What is the right to erasure also commonly known as under GDPR?

Accepted Answer

Right to be forgotten

Answer

The right to erasure is commonly called the 'right to be forgotten,' allowing individuals to request deletion of their personal data under GDPR Article 17.

Question 2

Under GDPR, within how many days must a data controller respond to a data subject access request (DSAR)?

Accepted Answer

30 days

Answer

GDPR requires data controllers to respond to DSARs within one month (approximately 30 days) of receiving the request.

Question 3

Which right allows individuals to move their personal data from one service provider to another?

Accepted Answer

Right to data portability

Answer

The right to data portability allows individuals to receive their personal data in a machine-readable format and transfer it to another controller.

Question 4

What must an organization verify before fulfilling a data subject rights request?

Accepted Answer

The identity of the requestor

Answer

Organizations must verify the identity of the person making a data subject rights request before fulfilling it to prevent unauthorized disclosure.

Question 5

Which right allows a data subject to request that processing be limited while the accuracy of their data is contested?

Accepted Answer

Right to restriction of processing

Answer

The right to restriction of processing allows data subjects to limit how their data is processed, such as when they contest its accuracy or object to processing.

CIPM - Certified Information Privacy Manager Practice Test

CIPM - Certified Information Privacy Manager Practice Test

CIPM CIPM Data Subject Rights