Discuss IAPP CIPM Exam Topic 6 Question 66

A minimum requirement for carrying out a Data Protection Impact Assessment (DPIA) would include?

AProcessing on a large scale of special categories of data.

BMonitoring of a publicly accessible area on a large scale.

CAssessment of the necessity and proportionality.

DAssessment of security measures.

Suggested Answer: C

Under the GDPR, when the applicable lawful basis for the processing of personal data is a legal obligation with which the controller must comply, the data subject can exercise the right to restriction. This means that the data subject can request the controller to limit the processing of their personal data in certain circumstances, such as when they contest the accuracy or lawfulness of the processing. The other rights are not applicable in this case, as they are either dependent on consent (right to withdraw consent and right to data portability) or subject to exceptions (right to erasure).Reference:GDPR, Articles 6(1), 18, 21(1).

Get Premium CIPM Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

35 comments · newest first

Noe 11 months ago

I agree with A, large scale processing needs thorough checks.

Rebecka 11 months ago

Wait, is D really a minimum requirement? That’s surprising!

Laurel 12 months ago

B seems a bit off for DPIA requirements.

Beatriz 12 months ago

I think C is crucial too, can't skip that step!

Rosio 1 year ago

Definitely A, especially with sensitive data involved.

Olga 1 year ago

I practiced a question similar to this, and I think assessing security measures is important, but it might not be the minimum requirement.

Barb 1 year ago

I'm not entirely sure, but I feel like monitoring publicly accessible areas might not always trigger a DPIA.

Pearlie 1 year ago

I remember discussing the necessity and proportionality aspect in class, so option C seems like a strong candidate.

Shala 1 year ago

I think a DPIA is definitely required when processing special categories of data, so I might lean towards option A.

Annett 1 year ago

Okay, let me break this down. I know a DPIA is required for processing special categories of data on a large scale, as well as for monitoring public areas. I'll need to carefully consider which of these is the minimum requirement.

Kati 1 year ago

Hmm, I'm not entirely sure about this one. I'll need to think through the key elements of a DPIA to determine the right answer.

Stacey 1 year ago

This question seems straightforward, I'm pretty confident I can identify the correct minimum requirement for a DPIA.

Bambi 1 year ago

I remember learning about DPIAs in class, but I'm drawing a blank on the specifics right now. I'll have to review my notes to refresh my memory before answering this.

Izetta 1 year ago

This seems like a straightforward integration question. I'll focus on understanding the key details - NTO wants to bring data from Salesforce into Marketing Cloud, and the solution architect recommended using Synchronized Data Sources and Marketing Cloud Connect. The question is asking which API the architect needs to use, so I'll carefully review the API options provided.

Edna 1 year ago

I'm going with C. Seems like the best all-encompassing choice to me. Although, I'm curious what kind of 'security measures' the exam writers had in mind for D...

Adelina 1 year ago

↳ replying to Edna

C: Yeah, it covers a lot of aspects that need to be considered.

Denise 1 year ago

↳ replying to Edna

B: I agree, assessing the necessity and proportionality is crucial.

Billye 1 year ago

↳ replying to Edna

A: I think C is the most important requirement for a DPIA.

Delmy 1 year ago

Haha, the answer is clearly C. Anyone who's worked in data privacy knows that's the bread and butter of a DPIA. 'Necessity and proportionality' - classic data protection lingo!

Verdell 1 year ago

↳ replying to Delmy

C: Couldn't agree more, that's the heart of data protection assessments.

Ludivina 1 year ago

↳ replying to Delmy

B: Definitely, it's all about assessing if the data processing is really needed and if it's done in a fair way.

Mitzie 1 year ago

↳ replying to Delmy

A: I agree, necessity and proportionality are key in a DPIA.

Anisha 2 years ago

C definitely sounds like the most comprehensive option. Gotta cover all the bases when it comes to data protection!

Martin 1 year ago

↳ replying to Anisha

C) Assessment of the necessity and proportionality.

Ettie 1 year ago

↳ replying to Anisha

B) Monitoring of a publicly accessible area on a large scale.

Julio 1 year ago

↳ replying to Anisha

A) Processing on a large scale of special categories of data.

Bonita 2 years ago

Hmm, I'm not sure. I was thinking B might be the right answer since monitoring a public area on a large scale could potentially have privacy implications.

Janessa 1 year ago

↳ replying to Bonita

I think it's C) Assessment of the necessity and proportionality.

Casey 1 year ago

↳ replying to Bonita

D) Assessment of security measures.

Jodi 1 year ago

↳ replying to Bonita

C) Assessment of the necessity and proportionality.

Catrice 1 year ago

↳ replying to Bonita

A) Processing on a large scale of special categories of data.

Oneida 2 years ago

I think the correct answer is C. The assessment of the necessity and proportionality of the data processing is a critical component of a DPIA.

Corazon 2 years ago

I also think that processing on a large scale of special categories of data is a minimum requirement for a DPIA.

Ciara 2 years ago

I agree with Silva, assessing the necessity and proportionality is crucial for a DPIA.

Silva 2 years ago

I think the minimum requirement for carrying out a DPIA would include assessing the necessity and proportionality.

IAPP CIPM Exam - Topic 6 Question 66 Discussion