IAPP CIPP/A Exam - Topic 1 Question 79 Discussion

Actual exam question for IAPP's CIPP/A exam

Question #: 79
Topic #: 1

[All CIPP/A Questions]

All of the following are guidelines the PDPC gives about anonymised data EXCEPT?

AAnonymised data is not personal data.

BAny data that has been anonymised bears the same risks for re-identification.

CData that has been anonymised satisfies the 'cease to retain' requirement of Section 25.

DOrganizations should consider the risk of re-identification if it intends to publish or disclose anonymised data.

Show Suggested Answer

Suggested Answer: C

https://www.pdpc.gov.sg/-/media/Files/PDPC/New_DPO_Connect/nov_15/pdf/Anonymisation.pdf

by Sherita at Apr 07, 2025, 07:23 AM

Limited Time Offer

25%

Off

Get Premium CIPP/A Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Germaine

4 months ago

Organizations should always consider re-identification risks!

upvoted 0 times

...

Ligia

5 months ago

Wait, does anonymised data really satisfy the 'cease to retain' rule?

upvoted 0 times

...

Ruthann

5 months ago

I thought all anonymised data was safe to share.

upvoted 0 times

...

Claudio

5 months ago

I agree, but the risks of re-identification are real!

upvoted 0 times

...

Marcelle

5 months ago

Anonymised data is definitely not personal data.

upvoted 0 times

...

Chandra

6 months ago

I definitely remember that organizations need to consider re-identification risks when disclosing data. That seems important!

upvoted 0 times

...

Arthur

6 months ago

I vaguely recall something about the 'cease to retain' requirement, but I can't remember if it applies to anonymised data.

upvoted 0 times

...

Lavonna

6 months ago

I'm a bit unsure about the risks of re-identification. I feel like there was a question similar to this in our practice tests.

upvoted 0 times

...

Ronald

6 months ago

I think I remember that anonymised data is considered not personal data, so maybe that's the right answer?

upvoted 0 times

...

Larae

6 months ago

This is a good test of my knowledge on the PDPC guidelines for anonymized data. I'm confident I can eliminate the incorrect option and select the right answer.

upvoted 0 times

...

Adolph

7 months ago

Okay, I think I've got this. The key is to identify the one guideline that the PDPC does NOT provide. Let me think this through step-by-step.

upvoted 0 times

...

Iola

7 months ago

Hmm, the options cover a lot of different aspects of anonymized data. I'll need to carefully read through each one to determine which one is not a guideline.

upvoted 0 times

...

Scarlet

7 months ago

This question seems straightforward, but I want to make sure I understand the guidelines correctly before selecting an answer.

upvoted 0 times

...

Willodean

12 months ago

B) 'Bears the same risks'? Sounds like the PDPC is doing a great job of keeping us on our toes. I bet they're just trying to keep us all paranoid.

upvoted 0 times

Krissy

10 months ago

D) Organizations should consider the risk of re-identification if it intends to publish or disclose anonymised data.

upvoted 0 times

...

Theron

10 months ago

C) Data that has been anonymised satisfies the 'cease to retain' requirement of Section 25.

upvoted 0 times

...

Lashon

11 months ago

A) Anonymised data is not personal data.

upvoted 0 times

...

Aliza

12 months ago

A) Haha, good one! Anonymized data is totally personal data in disguise. Nice try, PDPC.

upvoted 0 times

...

Elina

12 months ago

D) Well, duh. Of course organizations should consider the risk of re-identification. It's like they're asking us to be irresponsible with people's data.

upvoted 0 times