CIPT Data Lifecycle Management and Governance 2

Question 1

What is the purpose of a data processing agreement (DPA) between a controller and a processor?

Accepted Answer

To contractually bind the processor to process data only on documented instructions and implement adequate safeguards

Answer

A DPA ensures the processor acts only on the controller's instructions, maintains confidentiality, and implements appropriate technical and organizational security measures.

Question 2

A company maintains records of all its data processing activities including purposes, categories of data, and retention periods. What is this record called?

Accepted Answer

Record of Processing Activities (RoPA)

Answer

A Record of Processing Activities (RoPA) is a documented inventory of all processing activities required by privacy regulations such as GDPR Article 30.

Question 3

Which concept describes tracking the origin, movement, and transformations of data across its entire lifecycle within an organization?

Accepted Answer

Data lineage

Answer

Data lineage documents where data comes from, how it moves through systems, and how it is transformed, enabling accountability and privacy compliance verification.

Question 4

An organization must delete a customer's data upon request. Which governance process ensures all copies — including backups — are identified and removed?

Accepted Answer

Data mapping combined with a defined erasure workflow

Answer

Effective erasure requires a comprehensive data map to locate all copies — production, backup, archives, and third-party processors — followed by a documented deletion workflow.

Question 5

What does 'data sovereignty' mean in the context of data governance?

Accepted Answer

Data is subject to the laws of the country in which it is collected or stored

Answer

Data sovereignty means that data is governed by the legal and regulatory framework of the jurisdiction where it resides, affecting cross-border transfer decisions.

CIPT - Certified Information Privacy Technologist Practice Test

CIPT - Certified Information Privacy Technologist Practice Test

CIPT Data Lifecycle Management and Governance 2