IGP Records Management & Data Privacy 4

Question 1

What is the role of a Data Protection Officer (DPO) under GDPR?

Accepted Answer

To monitor compliance with data protection laws and advise on obligations

Answer

The DPO monitors compliance with GDPR, advises the organization on its data protection obligations, and acts as a contact point for supervisory authorities and data subjects.

Question 2

In electronic records management, what is 'format migration' intended to prevent?

Accepted Answer

Loss of access to records due to obsolete file formats or technology

Answer

Format migration converts records from obsolete or at-risk file formats to current ones to ensure long-term accessibility and usability as technology evolves.

Question 3

Under Sarbanes-Oxley (SOX), what is the retention requirement for audit workpapers?

Accepted Answer

7 years

Answer

SOX Section 802 requires that audit and review workpapers be retained for seven years from the end of the fiscal period covered by the audit.

Question 4

What is 'pseudonymization' of personal data?

Accepted Answer

Replacing identifying information with artificial identifiers so data cannot be attributed to a specific person without additional information

Answer

Pseudonymization replaces direct identifiers with artificial ones, reducing privacy risk while allowing re-identification if the key is available, unlike anonymization which is irreversible.

Question 5

Which concept in records management ensures that a record has not been altered since it was created?

Accepted Answer

Integrity

Answer

Integrity means the record is complete and unaltered, while authenticity means it is what it purports to be — together they are distinct but related concepts in records management.

(IGP) Information Governance Professional Practice Test

(IGP) Information Governance Professional Practice Test

IGP Records Management & Data Privacy 4