CIPT Data Lifecycle Management and Governance 3

Question 1

A privacy governance framework assigns a Chief Privacy Officer (CPO). What is the CPO's primary organizational responsibility?

Accepted Answer

Leading the organization's privacy strategy and ensuring enterprise-wide compliance

Answer

Managing IT security incident response

Answer

Drafting contracts with data processors

Answer

Conducting employee background checks

Question 2

Which data governance artifact defines who can access specific datasets, under what conditions, and for what approved purposes?

Accepted Answer

Data access policy

Answer

Privacy notice

Answer

System security plan

Answer

Data processing agreement

Question 3

What is the primary risk of 'data sprawl' from a privacy governance perspective?

Accepted Answer

Uncontrolled copies of personal data spread across systems, increasing breach surface and erasure complexity

Answer

Increased storage costs

Answer

Slower database query performance

Answer

Difficulty in software version control

Question 4

An organization implements automated data expiry rules that delete personal records when their retention period ends. What governance benefit does this provide?

Accepted Answer

Reduces risk of holding data beyond its legal or business justification

Answer

Improves database query speed

Answer

Ensures HIPAA encryption requirements are met

Answer

Reduces the need for user consent mechanisms

Question 5

In a data governance program, what is the role of a 'data steward'?

Accepted Answer

Managing day-to-day data quality, classification, and compliance for a specific dataset or domain

Answer

Setting organization-wide privacy strategy

Answer

Processing personal data on behalf of the controller

Answer

Responding to data subject access requests

Question 6

Which process ensures that third-party vendors who access personal data meet the organization's privacy and security standards before contracting?

Accepted Answer

Vendor privacy due diligence (third-party risk assessment)

Answer

Penetration testing

Answer

Security information and event management (SIEM)

Answer

Data loss prevention (DLP) scanning