CIPM Data Retention and Deletion 2

Question 1

Which of the following is a key element of an effective data destruction certification?

Accepted Answer

Documentation of the date, method, and identity of personnel who performed destruction

Answer

Destruction certificates serve as evidence of compliance and should capture when, how, and by whom data was destroyed, creating an auditable record.

Question 2

How should an organization handle personal data in backup systems when the primary data has reached its retention limit?

Accepted Answer

The organization should establish processes to purge expired data from backups on a scheduled basis

Answer

Retention obligations apply to all copies of data, including backups; organizations must establish processes to purge expired data from backup systems.

Question 3

What role does a Records Retention Policy play in a privacy program?

Accepted Answer

It establishes organization-wide rules for how long records are kept and how they are disposed of

Answer

A Records Retention Policy provides the governance framework specifying retention periods by record type and the approved methods for secure disposal.

Question 4

Which of the following scenarios requires a reassessment of existing retention periods?

Accepted Answer

New legislation changes the minimum retention requirement for a data category

Answer

Changes in law or regulation that affect minimum or maximum retention periods require a review and update of existing retention schedules to ensure ongoing compliance.

Question 5

What is 'pseudonymization' and how does it relate to retention?

Accepted Answer

Replacing direct identifiers with a key, allowing re-identification, but reducing risk during longer retention periods

Answer

Pseudonymization replaces identifiers with a key while retaining re-identification capability; it reduces risk during retention but the data remains personal and subject to retention rules.

CIPM - Certified Information Privacy Manager Practice Test

CIPM - Certified Information Privacy Manager Practice Test

CIPM Data Retention and Deletion 2