Discuss IAPP CIPM Exam Topic 2 Question 32

Under the General Data Protection Regulation (GDPR), which situation would be LEAST likely to require a Data Protection Impact Assessment (DPIA)?

AA health clinic processing its patients' genetic and health data

BThe use of a camera system to monitor driving behavior on highways

CA Human Resources department using a tool to monitor its employees' internet activity

DAn online magazine using a mailing list to send a generic daily digest to marketing emails

Suggested Answer: D

Get Premium CIPM Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

13 comments · newest first

Susana 12 months ago

Monitoring driving behavior (B) sounds like it would need a DPIA too.

Starr 1 year ago

Wait, are you sure about that? Seems like they should still be careful.

Suzan 1 year ago

Totally agree with Lindy, it’s just marketing emails!

Lindy 1 year ago

I think the online magazine (D) is the least likely to need one.

Tresa 1 year ago

A health clinic definitely needs a DPIA for sensitive data.

Sheldon 1 year ago

I'm leaning towards option D as well, but I wonder if there are exceptions for marketing emails that I might have missed in my studies.

Adria 1 year ago

I practiced a question similar to this, and I feel like monitoring driving behavior could be considered high-risk, but I can't recall the specifics.

Leanna 1 year ago

I think the online magazine sending generic emails might be the least likely to need a DPIA, since it doesn't involve sensitive data like health or employee monitoring.

Corrinne 1 year ago

I remember that DPIAs are usually required for high-risk processing, but I'm not sure which of these is the least risky.

Leota 1 year ago

Okay, let me think this through step-by-step. I need to identify which change request requirements are different from the current OPS project setup. The key things to look for are changes to versioning, component leads, workflow, notifications, and required fields.

Jeniffer 1 year ago

This looks like a pretty straightforward question about SSH commands. I'm pretty confident I know the answer, but I'll quickly review the options just to be sure.

Lashandra 1 year ago

This looks like a pretty straightforward question. I'll take a close look at the PCAP file and see if I can identify the application protocol based on the packet headers and contents.

Tawanna 1 year ago

This is a complex problem, but I think I can come up with a solid solution. I'll need to carefully evaluate each of the options and make sure I address the client's concerns about security and fault tolerance.

IAPP CIPM Exam - Topic 2 Question 32 Discussion