ACFE CFE-Investigation Exam - Topic 2 Question 55 Discussion

Actual exam question for ACFE's CFE-Investigation exam

Question #: 55
Topic #: 2

A fraud examiner is based in Mexico, a non-European Union (EU) country and is collecting personal information from their company human resources (MR) files about an employee based in Germany an employee based country Based on these facts. The fraud examiner would need to comply with the EU's General Data Protection Regulation (GDPR) when conducting their Internal investigation.

ATrue

BFalse

Show Suggested Answer

Suggested Answer: A

by Audra at Aug 04, 2022, 09:11 AM

Limited Time Offer

25%

Off

Get Premium CFE-Investigation Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Vilma

4 months ago

False, I don't think they need to comply if they're outside the EU.

upvoted 0 times

...

Meghan

4 months ago

Yup, even non-EU countries must follow GDPR for EU data.

upvoted 0 times

...

Amie

4 months ago

Wait, really? I thought it only applied in the EU.

upvoted 0 times

...

Stephanie

5 months ago

Totally agree, compliance is key!

upvoted 0 times

...

Carey

5 months ago

True, GDPR applies to any data of EU citizens.

upvoted 0 times

...

Ammie

5 months ago

I recall that GDPR has extraterritorial reach, so even though the examiner is in Mexico, they still need to comply with it for the German employee.

upvoted 0 times

...

Pearly

5 months ago

I feel a bit confused about this. I thought GDPR only applied to EU entities, but since the employee is in Germany, maybe it does apply?

upvoted 0 times

...

Jess

5 months ago

I think I came across a similar question about data protection laws in my practice exams. If the employee is in Germany, the GDPR likely applies, right?

upvoted 0 times

...

Bulah

5 months ago

I remember studying GDPR and how it applies to data processing, but I'm not entirely sure if it covers non-EU countries like Mexico.

upvoted 0 times

...

Shala

5 months ago

This looks like a straightforward question about managing encryption keys and permissions in Google Cloud. I think the key is to understand the requirements around managing permissions in a grouped way.

upvoted 0 times

...

Sueann

5 months ago

The last option, D, is interesting. If the data files and redo log files are automatically removed, that could simplify the process. I'll have to think through the implications of that.

upvoted 0 times

...