Data Lifecycle Management and Governance Flashcards

Which phase of the data lifecycle involves determining what data to collect, for what purpose, and under what legal basis?

Answer: Data collection and creation

The collection and creation phase is where organizations define purpose, legal basis, and data minimization requirements before any personal data is obtained.

A data retention policy specifies that customer purchase records must be deleted after seven years. Which principle does this policy primarily support?

Answer: Storage limitation (data retention minimization)

Storage limitation requires that personal data not be kept longer than necessary for its specified purpose, as defined in a documented retention schedule.

What is a data inventory (or data map) primarily used for in a privacy governance program?

Answer: Documenting where personal data is collected, stored, processed, and shared

A data inventory catalogs all personal data assets, their locations, purposes, legal bases, and flows, forming the foundation for privacy compliance programs.

Which role is typically responsible for defining data classification levels and associated handling requirements in a data governance program?

Answer: Data owner

The data owner (usually a business unit leader) is accountable for data classification decisions and the rules governing how data at each level must be handled.

An organization applies different handling rules to 'confidential,' 'internal,' and 'public' data categories. What process created these distinctions?

Answer: Data classification

Data classification assigns sensitivity levels to data categories, enabling proportionate controls to be applied based on the level of privacy risk.

During the data disposal phase, which method best ensures that magnetic hard drive data is unrecoverable?

Answer: Degaussing followed by physical destruction

Degaussing disrupts magnetic domains to erase data, and physical destruction ensures media cannot be reconstructed, together providing the highest assurance of unrecoverability.