IAPP Exam CIPP-C Topic 4 Question 61 Discussion

Actual exam question for IAPP's CIPP-C exam

Question #: 61
Topic #: 4

Under the Personal Information Protection and Electronic Documents Act (PIPEDA), an organization must maintain a record of every breach of security safeguards involving personal information for a minimum of?

A3 months.

B12 months.

C24 months.

D36 months

Show Suggested Answer

Suggested Answer: A

by Kami at Mar 22, 2025, 11:23 AM

Limited Time Offer

25%

Off

Get Premium CIPP-C Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Eveline

2 months ago

3 months? Are you kidding me? That's way too short for a data breach record. Gotta be 24 months, no doubt about it.

upvoted 0 times

Dino

23 days ago

Yeah, 24 months seems like a more appropriate timeframe to keep a record of data breaches.

upvoted 0 times

...

Mozell

27 days ago

I agree, 3 months is definitely too short. 24 months sounds more reasonable.

upvoted 0 times

...

Nenita

2 months ago

Hmm, I thought it was 12 months. But 24 months makes sense, better to be safe than sorry with personal data breaches.

upvoted 0 times

...

Brock

2 months ago

I'm not sure, but I think it makes sense to keep records for at least a year to ensure compliance with PIPEDA.

upvoted 0 times

...

Lenita

2 months ago

Well, this seems straightforward. 24 months is the required retention period, right?

upvoted 0 times

Alysa

2 days ago

Definitely. It's all about protecting people's privacy and data.

upvoted 0 times

...

Marta

3 days ago

I agree. It helps ensure accountability and transparency in handling personal information.

upvoted 0 times

...

Monte

4 days ago

That's good to know. It's important to keep track of security breaches for that long.

upvoted 0 times

...

Keena

5 days ago

Yes, you are correct. The organization must maintain a record of every breach for 24 months.

upvoted 0 times

...

Julieta

7 days ago

Definitely, it's a crucial part of complying with PIPEDA regulations.

upvoted 0 times

...

Katheryn

11 days ago

I agree, it helps with accountability and transparency in handling sensitive data.

upvoted 0 times

...

Francesco

21 days ago

It's important to keep track of these breaches to ensure the protection of personal information.

upvoted 0 times

...

Enola

24 days ago

Yes, that's correct. The organization must maintain a record of every breach for 24 months.

upvoted 0 times

...

Tracey

2 months ago

I agree with Genevive, because it allows organizations to track and analyze breaches over a longer period of time.

upvoted 0 times

...

Genevive

2 months ago

I think the answer is B) 12 months.

upvoted 0 times

...