MENU
The Traffic Department of a city wants to know how many cars travel daily in order to plan the number of spaces needed to implement a rotating parking system.
To do this, cameras were installed at strategic points. Through image recognition software it is possible to capture the license plate and know how many cars traveled in the city. A monthly report is issued with the average number of cars present each day.
Signs and posters were spread around the city informing drivers and citizens what is the purpose of processing and that the data will be stored for up to five years, for future comparison.
What basic principle of legitimate processing of personal data is being violated in this case?
Suggested Answer: D
Get Premium PDPF Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
Data protection and privacy are complementary, but not the same thing.
A very repeated phrase is: ''It is possible to have security without privacy, but it is not possible to have privacy without security''.
Privacy is a right that must be protected, and Data Protection are the measures that will be used to achieve this protection.
41 comments · newest first
JA
James
11 months ago
I think it's fine as long as they inform everyone.
RE
Rebecka
11 months ago
This is definitely a violation of data retention principles.
OL
Oliva
11 months ago
Wait, are they really storing that info for five years? Sounds sketchy.
HE
Hershel
12 months ago
I agree, five years is excessive for just tracking cars.
FA
Fausto
12 months ago
Seems like they're keeping data way too long!
LI
Lindsay
12 months ago
I’m torn between A and D. A seems to fit because of the five-year retention, but D also makes sense since they need a clear purpose for collecting the data in the first place.
PE
Peggy
1 year ago
I practiced a similar question where the focus was on the purpose of data collection. I think option D might be the right answer since it mentions specific and legitimate purposes.
HE
Heike
1 year ago
I'm a bit unsure, but I feel like the transparency aspect might be relevant too. They did inform people, but is that enough?
VI
Viki
1 year ago
I think the key issue here is about how long they keep the data. I remember something about not retaining personal data longer than necessary.
EA
Earnestine
1 year ago
Hmm, I'm not sure about this one. I know we can use variables, but I'm not sure if that's the only way. I'll have to think this through carefully.
FL
Flo
1 year ago
Okay, I've got a strategy here. Since the app uses local SSDs for caching, I'll want to make sure that's encrypted. And for the instance-to-instance communications, switching from UDP to TCP and using BoringSSL seems like a good way to secure that.
GI
Gilma
1 year ago
I'm a bit confused on the best approach here. Should I be converting the images to TensorFlow objects or using TFRecords? I'll need to review the Google recommendations carefully.
SH
Shenika
1 year ago
You know, with all this license plate data, the city could probably start a whole new business - 'License to Thrill' limo rentals. Just saying, they might be onto something here.
TE
Terrilyn
1 year ago
They should make sure to only use the data for what they said they would.
OL
Oliva
1 year ago
I agree, they are collecting data for one purpose but might end up using it for something else.
VA
Van
1 year ago
I think option D is being violated here.
CH
Christene
1 year ago
Hey, at least the city is being upfront about the surveillance. Imagine if they tried to hide it and got caught - talk about a 'traffic jam' in the courts!
CE
Ceola
1 year ago
Hah, this is like a real-life episode of Minority Report. The city is tracking everyone's movements for the next 5 years? Sounds like a dystopian nightmare to me. I'm giving this one to D, just to be on the safe side.
SH
Shenika
1 year ago
D) Personal data must be collected for specific, explicit and legitimate purposes and must not be further processed for incompatible purposes.
RO
Ronny
1 year ago
C) Personal data must be processed in a way that guarantees the appropriate security of personal data.
KI
Kirk
1 year ago
B) Personal data must be processed transparently in relation to the data subject.
JA
Jaime
1 year ago
A) Personal data must be kept in a way that allows the identification of data subjects for a period not longer than necessary.
SH
Shantell
1 year ago
I'm gonna go with A. Keeping that data for 5 years? That's a long time to identify individual drivers. I bet the city traffic cops are just looking for an excuse to pull people over. Where's the transparency in that?
GR
Graciela
1 year ago
C) Yeah, transparency is definitely lacking in this situation. They should be more upfront about how long they're keeping the data.
JA
Jamal
1 year ago
B) I agree, it seems like a violation of privacy to keep that data for so long.
RI
Rickie
1 year ago
A) Personal data must be kept in a way that allows the identification of data subjects for a period not longer than necessary.
RO
Roslyn
2 years ago
Definitely D. Collecting license plate data for 5 years seems way longer than necessary to plan parking spaces. Plus, they could use that data for other, incompatible purposes down the line. Not cool, Traffic Department.
VE
Verdell
1 year ago
The Traffic Department should reconsider their data retention policy.
PE
Peggie
1 year ago
It's important to respect the principle of collecting data for specific and legitimate purposes.
GI
Gianna
1 year ago
Yeah, they should only collect data for the specific purpose of planning parking spaces.
KA
Kara
1 year ago
I agree, keeping the data for 5 years seems excessive.
JE
Jeanice
1 year ago
The Traffic Department should reconsider their data retention policy.
LE
Leota
1 year ago
It's important to respect the principle of collecting data for specific purposes.
BR
Brittney
1 year ago
Yeah, they should only use it for the purpose they stated.
RO
Rolland
1 year ago
I agree, keeping the data for 5 years seems excessive.
CO
Cordie
2 years ago
This is a tricky one. I'm pretty sure the answer is B, but the city seems to be doing a decent job of informing the public about the data processing. Maybe they could do better with transparency, but it's not a clear violation in my opinion.
DO
Doug
1 year ago
C) Personal data must be processed in a way that guarantees the appropriate security of personal data.
TA
Tamesha
1 year ago
A) Personal data must be kept in a way that allows the identification of data subjects for a period not longer than necessary.
HU
Hubert
2 years ago
But isn't option D also relevant? The data is being collected for a specific purpose.
NI
Nieves
2 years ago
I agree with Bethanie, personal data should not be kept longer than necessary.
BE
Bethanie
2 years ago
I think the basic principle being violated is option A.