CIPT Data Lifecycle Management and Governance 3

Question 1

A privacy governance framework assigns a Chief Privacy Officer (CPO). What is the CPO's primary organizational responsibility?

Accepted Answer

Leading the organization's privacy strategy and ensuring enterprise-wide compliance

Answer

The CPO sets privacy strategy, oversees compliance programs, advises leadership, and is ultimately accountable for the organization's privacy posture.

Question 2

Which data governance artifact defines who can access specific datasets, under what conditions, and for what approved purposes?

Accepted Answer

Data access policy

Answer

A data access policy specifies authorization rules, access conditions, and approved purposes for each data category, supporting both governance and privacy compliance.

Question 3

What is the primary risk of 'data sprawl' from a privacy governance perspective?

Accepted Answer

Uncontrolled copies of personal data spread across systems, increasing breach surface and erasure complexity

Answer

Data sprawl creates untracked copies of personal data that may not be covered by security controls or erasure workflows, elevating privacy risk.

Question 4

An organization implements automated data expiry rules that delete personal records when their retention period ends. What governance benefit does this provide?

Accepted Answer

Reduces risk of holding data beyond its legal or business justification

Answer

Automated retention enforcement ensures data is not held longer than necessary, reducing regulatory exposure and minimizing the dataset affected in a breach.

Question 5

In a data governance program, what is the role of a 'data steward'?

Accepted Answer

Managing day-to-day data quality, classification, and compliance for a specific dataset or domain

Answer

Data stewards are operational custodians who enforce data governance policies, maintain data quality, and ensure day-to-day compliance within their assigned data domain.

CIPT - Certified Information Privacy Technologist Practice Test

CIPT - Certified Information Privacy Technologist Practice Test

CIPT Data Lifecycle Management and Governance 3