IAPP Exam CIPP/C Topic 5 Question 36 Discussion

Actual exam question for IAPP's CIPP/C exam

Question #: 36
Topic #: 5

[All CIPP/C Questions]

According to the Canadian Standards Association (CSA) Model Code, how long should personal information be retained?

APersonal information should not be retained at all.

BPersonal information should be retained indefinitely as long as consent has been given.

CPersonal information should be retained for at least two years after the last administrative use.

DPersonal information should be retained as long as necessary for the fulfillment of the purpose of the collection.

Show Suggested Answer

Suggested Answer: B

by Helga at Jan 28, 2024, 03:43 PM

Limited Time Offer

25%

Off

Get Premium CIPP/C Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Odette

4 months ago

Definitely going with D. Retaining personal info for at least two years after use? That's just asking for trouble.

upvoted 0 times

Lettie

3 months ago

Yeah, it makes sense to retain personal information only for as long as necessary.

upvoted 0 times

...

Truman

3 months ago

I agree, option D seems like the most reasonable choice.

upvoted 0 times

...

Ty

4 months ago

Haha, A is just too extreme. 'Personal information should not be retained at all'? Yeah, right, good luck with that!

upvoted 0 times

Felicidad

2 months ago

I think D makes the most sense, retain it as long as necessary for the purpose.

upvoted 0 times

...

Terrilyn

3 months ago

I agree, personal information needs to be retained for a certain period of time.

upvoted 0 times

...

Annett

3 months ago

I know, right? A is definitely not practical.

upvoted 0 times

...

Delmy

4 months ago

I'm torn between B and D, but I think D is the safer choice. You don't want to hold on to sensitive data longer than necessary.

upvoted 0 times

...

Cecily

4 months ago

Option D seems the most reasonable to me. Retaining personal information indefinitely even with consent seems like a privacy violation waiting to happen.

upvoted 0 times

Karina

2 months ago

I think we can all agree that protecting personal information should be a top priority.

upvoted 0 times

...

Nickolas

2 months ago

I see your point, but I still believe option D is the best way to ensure personal information is only kept for as long as necessary.

upvoted 0 times

...

Merilyn

3 months ago

I think option C is also a good choice, as it ensures personal information is retained for a reasonable period of time.

upvoted 0 times

...

Dona

3 months ago

I agree, option D makes the most sense in terms of privacy protection.

upvoted 0 times

...

Carissa

4 months ago

But what about privacy concerns? Shouldn't personal information be deleted after a certain period of time to protect individuals?

upvoted 0 times

...

Sherell

4 months ago

I agree with Cathrine. It's important to keep personal information for the intended purpose.

upvoted 0 times

...

Cathrine

4 months ago

I think personal information should be retained as long as necessary for the fulfillment of the purpose of the collection.

upvoted 0 times

...

Jade

4 months ago

I believe personal information should not be retained at all to protect privacy.

upvoted 0 times

...

Isidra

4 months ago

I agree with Valentin. It's important to keep personal information for the intended purpose.

upvoted 0 times

...

Valentin

4 months ago

I think personal information should be retained as long as necessary for the fulfillment of the purpose of the collection.

upvoted 0 times

...