IAPP Exam CIPP/C Topic 3 Question 60 Discussion

Actual exam question for IAPP's CIPP/C exam

Question #: 60
Topic #: 3

A private sector daycare's portal for parents stores their children's photos, allergy information and date of birth. A parent has asked about the portal's security requirements and in three months still not has received an answer. What is missing from the daycare's procedures?

AEnsuring transparency.

BResponding to the parent's request within 30 days.

CEnsuring strong encryption and security measures.

DCompleting a real risk of significant harm assessment (RROSH).

Show Suggested Answer

Suggested Answer: C

by Jess at Mar 08, 2025, 08:20 PM

Limited Time Offer

25%

Off

Get Premium CIPP/C Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Bette

2 months ago

Ah, the joys of bureaucracy. I'd put my money on 'Responding to the parent's request within 30 days' - nothing like a good ol' fashioned customer service fail to really spice up your daycare experience.

upvoted 0 times

Aliza

1 months ago

C: Maybe they should consider some transparency too. Parents have a right to know how their children's information is being protected.

upvoted 0 times

...

Ciara

2 months ago

B: Agreed, it's not rocket science. They need to step up their game.

upvoted 0 times

...

Mabel

2 months ago

A: They really dropped the ball on this one. 'Responding to the parent's request within 30 days' is basic customer service.

upvoted 0 times

...

Tonette

2 months ago

Haha, I bet the daycare's IT guy is just sitting at his desk, eating Cheetos and ignoring those emails. 'Real risk of significant harm assessment' sounds about right though, they better get on that!

upvoted 0 times

Billy

30 days ago

C: I agree, they should also make sure they have strong encryption and security measures in place.

upvoted 0 times

...

Linn

1 months ago

B: Yeah, transparency is key when it comes to storing sensitive information like that.

upvoted 0 times

...

Reuben

1 months ago

A: They definitely need to respond to the parent's request within 30 days.

upvoted 0 times

...

Kimberely

3 months ago

I'd go with 'Ensuring strong encryption and security measures.' Daycare centers handle some pretty sensitive info, they can't be slacking on the cybersecurity front.

upvoted 0 times

Jamie

1 months ago

C: It's concerning that they haven't responded to the parent's request for three months. Transparency is key in situations like this.

upvoted 0 times

...

Lettie

1 months ago

B: Absolutely, parents need to feel confident that their children's information is safe.

upvoted 0 times

...

Roosevelt

1 months ago

A: I agree, the daycare should definitely prioritize strong encryption and security measures.

upvoted 0 times

...

Teddy

3 months ago

Hmm, I'd say the missing piece here is 'Responding to the parent's request within 30 days.' Transparency is key, and leaving a parent hanging for 3 months is just not cool.

upvoted 0 times

...

Venita

3 months ago

Oof, this one's a tough one. The parent's request for info on the portal's security seems like a pretty reasonable ask. The daycare's lack of response is definitely not a good look.

upvoted 0 times