IAPP CIPM Exam - Topic 6 Question 66 Discussion

Actual exam question for IAPP's CIPM exam

Question #: 66
Topic #: 6

[All CIPM Questions]

A minimum requirement for carrying out a Data Protection Impact Assessment (DPIA) would include?

AProcessing on a large scale of special categories of data.

BMonitoring of a publicly accessible area on a large scale.

CAssessment of the necessity and proportionality.

DAssessment of security measures.

Show Suggested Answer

Suggested Answer: C

Under the GDPR, when the applicable lawful basis for the processing of personal data is a legal obligation with which the controller must comply, the data subject can exercise the right to restriction. This means that the data subject can request the controller to limit the processing of their personal data in certain circumstances, such as when they contest the accuracy or lawfulness of the processing. The other rights are not applicable in this case, as they are either dependent on consent (right to withdraw consent and right to data portability) or subject to exceptions (right to erasure).Reference:GDPR, Articles 6(1), 18, 21(1).

by Kerrie at Jul 17, 2024, 09:43 PM

Limited Time Offer

25%

Off

Get Premium CIPM Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Noe

4 months ago

I agree with A, large scale processing needs thorough checks.

upvoted 0 times

...

Rebecka

4 months ago

Wait, is D really a minimum requirement? That’s surprising!

upvoted 0 times

...

Laurel

4 months ago

B seems a bit off for DPIA requirements.

upvoted 0 times

...

Beatriz

4 months ago

I think C is crucial too, can't skip that step!

upvoted 0 times

...

Rosio

4 months ago

Definitely A, especially with sensitive data involved.

upvoted 0 times

...

Olga

5 months ago

I practiced a question similar to this, and I think assessing security measures is important, but it might not be the minimum requirement.

upvoted 0 times

...

Barb

5 months ago

I'm not entirely sure, but I feel like monitoring publicly accessible areas might not always trigger a DPIA.

upvoted 0 times

...

Pearlie

5 months ago

I remember discussing the necessity and proportionality aspect in class, so option C seems like a strong candidate.

upvoted 0 times

...

Shala

5 months ago

I think a DPIA is definitely required when processing special categories of data, so I might lean towards option A.

upvoted 0 times

...

Annett

5 months ago

Okay, let me break this down. I know a DPIA is required for processing special categories of data on a large scale, as well as for monitoring public areas. I'll need to carefully consider which of these is the minimum requirement.

upvoted 0 times

...

Kati

5 months ago

Hmm, I'm not entirely sure about this one. I'll need to think through the key elements of a DPIA to determine the right answer.

upvoted 0 times

...

Stacey

5 months ago

This question seems straightforward, I'm pretty confident I can identify the correct minimum requirement for a DPIA.

upvoted 0 times

...

Bambi

5 months ago

I remember learning about DPIAs in class, but I'm drawing a blank on the specifics right now. I'll have to review my notes to refresh my memory before answering this.

upvoted 0 times

...

Izetta

6 months ago

This seems like a straightforward integration question. I'll focus on understanding the key details - NTO wants to bring data from Salesforce into Marketing Cloud, and the solution architect recommended using Synchronized Data Sources and Marketing Cloud Connect. The question is asking which API the architect needs to use, so I'll carefully review the API options provided.

upvoted 0 times

...

Edna

10 months ago

I'm going with C. Seems like the best all-encompassing choice to me. Although, I'm curious what kind of 'security measures' the exam writers had in mind for D...

upvoted 0 times

Adelina

9 months ago

C: Yeah, it covers a lot of aspects that need to be considered.

upvoted 0 times

...

Denise

9 months ago

B: I agree, assessing the necessity and proportionality is crucial.

upvoted 0 times

...

Billye

9 months ago

A: I think C is the most important requirement for a DPIA.

upvoted 0 times

...

Delmy

10 months ago

Haha, the answer is clearly C. Anyone who's worked in data privacy knows that's the bread and butter of a DPIA. 'Necessity and proportionality' - classic data protection lingo!

upvoted 0 times

Verdell

10 months ago

C: Couldn't agree more, that's the heart of data protection assessments.

upvoted 0 times

...

Ludivina

10 months ago

B: Definitely, it's all about assessing if the data processing is really needed and if it's done in a fair way.

upvoted 0 times

...

Mitzie

10 months ago

A: I agree, necessity and proportionality are key in a DPIA.

upvoted 0 times

...

Anisha

11 months ago

C definitely sounds like the most comprehensive option. Gotta cover all the bases when it comes to data protection!

upvoted 0 times

Martin

10 months ago

C) Assessment of the necessity and proportionality.

upvoted 0 times

...

Ettie

10 months ago

B) Monitoring of a publicly accessible area on a large scale.

upvoted 0 times

...

Julio

10 months ago

A) Processing on a large scale of special categories of data.

upvoted 0 times

...

Bonita

11 months ago

Hmm, I'm not sure. I was thinking B might be the right answer since monitoring a public area on a large scale could potentially have privacy implications.

upvoted 0 times