Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

IAPP CIPM Exam - Topic 5 Question 31 Discussion

Under the General Data Protection Regulation (GDPR), which of the following situations would LEAST likely require a controller to notify a data subject?
B) A direct marketing email is sent with recipients visible in the 'cc' field
A) An encrypted USB key with sensitive personal data is stolen
C) Personal data of a group of individuals is erroneously sent to the wrong mailing list
D) A hacker publishes usernames, phone numbers and purchase history online after a cyber-attack

IAPP CIPM Exam - Topic 5 Question 31 Discussion

Actual exam question for IAPP's CIPM exam
Question #: 31
Topic #: 5
[All CIPM Questions]

Under the General Data Protection Regulation (GDPR), which of the following situations would LEAST likely require a controller to notify a data subject?

Show Suggested Answer Hide Answer
Suggested Answer: B

Contribute your Thoughts:

0/2000 characters
Lajuana
10 months ago
D is a huge deal, but B is just embarrassing.
upvoted 0 times
...
Dick
11 months ago
C is also pretty concerning, but I see the point.
upvoted 0 times
...
Lamonica
11 months ago
Wait, are we sure about that? All data breaches should be reported!
upvoted 0 times
...
Remedios
11 months ago
I agree, B seems the least serious.
upvoted 0 times
...
Frederica
11 months ago
Definitely B, that's more of a minor issue.
upvoted 0 times
...
Katlyn
11 months ago
D seems like a clear case where notification is necessary, but I’m torn between B and C for the least likely. I need to double-check the guidelines.
upvoted 0 times
...
Sabra
11 months ago
I feel like C might be the least likely to require notification, especially if it was just a small group. But I could be wrong.
upvoted 0 times
...
Royal
11 months ago
I remember practicing a question similar to this, and I think sending an email with recipients in 'cc' could be a breach, so maybe that's the one that needs notification.
upvoted 0 times
...
Rhea
11 months ago
I think option A would definitely require notification since it's sensitive data, but I'm not sure about B.
upvoted 0 times
...
Margarita
12 months ago
I'm pretty confident I know this one. The ArchiMate language models the Business, Application, and Technology layers of Enterprise Architecture.
upvoted 0 times
...
Marcelle
12 months ago
Alright, time to put my Java knowledge to the test. I'll go through each option and consider whether the field is accessible and if the assignment is valid.
upvoted 0 times
...

Save Cancel