Discuss ACFE CFE-Law Exam Topic 1 Question 24

Which of the following is NOT a requirement of the European Union's (EU) General Data Protection Regulation (GDPR)?

AAn organization must delete a data subject's personal data automatically when the data are no longer m use.

BAn organization must have a documented lawful basis for collecting or processing personal data.

CAn organization generally must notify all affected data subjects without undue delay when a high-risk data breach occurs

DAn organization must confirm or deny that it possesses a data subject's personal data upon that individual's request

Suggested Answer: B

Get Premium CFE-Law Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

16 comments · newest first

Malinda 11 months ago

I’m surprised A is even an option here!

Madelyn 11 months ago

B and C are the real deal, no doubt about it.

Carrol 12 months ago

Wait, I thought organizations had to delete data automatically?

Malcolm 12 months ago

Totally agree, A is misleading!

Leslee 12 months ago

A is definitely not a requirement.

Francoise 1 year ago

I’m leaning towards option C being a requirement since I studied about breach notifications, but I’m not 100% confident about the specifics.

Cheryl 1 year ago

I definitely remember that organizations need a lawful basis for processing data, so option B seems like a requirement.

Alease 1 year ago

I'm not entirely sure, but I feel like option D is also a tricky one. I practiced a question where organizations had to confirm possession, but I can't recall the exact details.

Albert 1 year ago

I think option A might be the one that's not a requirement. I remember something about data retention policies being more flexible.

Aliza 1 year ago

I'm feeling confident about this one. The GDPR doesn't mandate automatic deletion of data, just that organizations have a valid reason for keeping it. I'll go with A.

Solange 1 year ago

Okay, let me think this through. I know the GDPR requires organizations to have a lawful basis for processing data, and to notify data subjects of breaches. I think the answer is A.

Cherilyn 1 year ago

Hmm, I'm a bit confused on this one. I know the GDPR has a lot of requirements, but I can't quite remember all the details.

Samira 1 year ago

I'm pretty sure the answer is A. The GDPR doesn't require automatic deletion of personal data when it's no longer in use.

Rodolfo 1 year ago

I think I know the answer, but I want to double-check my understanding before selecting it.

Nichelle 1 year ago

Hmm, this looks like a tricky one. I think I'll start by considering the options that directly address the performance issue, like increasing the number of workers or using a larger instance type.

Ivan 1 year ago

Based on the description, I think Social Studio would be the most appropriate solution. It sounds like it would allow the Alumni Relations office to manage their responses across Instagram, Twitter, and Facebook from a single platform.

ACFE CFE-Law Exam - Topic 1 Question 24 Discussion