Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

IAPP CIPP/C Exam - Topic 5 Question 36 Discussion

Actual exam question for IAPP's CIPP/C exam
Question #: 36
Topic #: 5
[All CIPP/C Questions]

According to the Canadian Standards Association (CSA) Model Code, how long should personal information be retained?

Show Suggested Answer Hide Answer
Suggested Answer: B

Contribute your Thoughts:

0/2000 characters
Helene
4 months ago
Totally agree with you, Cherilyn!
upvoted 0 times
...
Hyman
4 months ago
C is incorrect; it's all about the purpose!
upvoted 0 times
...
Tula
4 months ago
Wait, can they really keep it forever if they want?
upvoted 0 times
...
Hildred
4 months ago
Yeah, definitely D! Makes the most sense.
upvoted 0 times
...
Cherilyn
5 months ago
I think it's D, right? Retain as long as needed.
upvoted 0 times
...
Bambi
5 months ago
I’m pretty certain that consent plays a role, but I don't think it means indefinite retention. I lean towards option D as well.
upvoted 0 times
...
Dominic
5 months ago
I vaguely recall something about a two-year retention period, but that might have been for a different regulation.
upvoted 0 times
...
Maile
5 months ago
I practiced a question like this, and I feel like the answer was related to the purpose of the collection. Maybe it's option D?
upvoted 0 times
...
Tom
5 months ago
I think I remember that personal information shouldn't be kept longer than necessary, but I'm not sure about the exact time frame.
upvoted 0 times
...
Carri
5 months ago
Okay, I've got this. The CSA Model Code states that personal information should be retained for as long as it's needed to fulfill the purpose of collection. So the answer is definitely D.
upvoted 0 times
...
Corinne
5 months ago
Hmm, I'm a bit unsure on this. I know the CSA Code covers personal data, but I can't remember the exact retention guidelines. I'll have to think this through carefully.
upvoted 0 times
...
Enola
5 months ago
I'm pretty confident about this one. The CSA Model Code is all about data privacy, so I think the answer is D - personal information should be retained as long as necessary for the purpose it was collected for.
upvoted 0 times
...
Rickie
5 months ago
Ah, this is a tricky one. I remember learning about the CSA Code, but the details on retention periods are a bit fuzzy. I'll have to review my notes to see if I can narrow it down.
upvoted 0 times
...
Dannie
6 months ago
Hmm, I'm a bit unsure about this one. I know risk analysis is important, but I'm not totally clear on the specific initial steps. I'll have to think it through carefully.
upvoted 0 times
...
Laurel
6 months ago
Ugh, I'm a little fuzzy on the details of the vEdge product line. I'll have to make an educated guess on this one.
upvoted 0 times
...
Rocco
6 months ago
Okay, I remember learning about the seven types of waste in Lean Principles. I think the answer is A, Waste. I'll double-check my understanding, but I'm feeling good about this one.
upvoted 0 times
...
Therese
6 months ago
Hmm, I'm a bit confused by the wording here. I'll need to make sure I understand what the "Direct Authentication" and "Data Confidentiality" patterns are and how they relate to preventing unauthorized access. Let me re-read this a few times.
upvoted 0 times
...
Odette
10 months ago
Definitely going with D. Retaining personal info for at least two years after use? That's just asking for trouble.
upvoted 0 times
Lettie
10 months ago
Yeah, it makes sense to retain personal information only for as long as necessary.
upvoted 0 times
...
Truman
10 months ago
I agree, option D seems like the most reasonable choice.
upvoted 0 times
...
...
Ty
11 months ago
Haha, A is just too extreme. 'Personal information should not be retained at all'? Yeah, right, good luck with that!
upvoted 0 times
Felicidad
9 months ago
I think D makes the most sense, retain it as long as necessary for the purpose.
upvoted 0 times
...
Terrilyn
9 months ago
I agree, personal information needs to be retained for a certain period of time.
upvoted 0 times
...
Annett
10 months ago
I know, right? A is definitely not practical.
upvoted 0 times
...
...
Delmy
11 months ago
I'm torn between B and D, but I think D is the safer choice. You don't want to hold on to sensitive data longer than necessary.
upvoted 0 times
...
Cecily
11 months ago
Option D seems the most reasonable to me. Retaining personal information indefinitely even with consent seems like a privacy violation waiting to happen.
upvoted 0 times
Karina
9 months ago
I think we can all agree that protecting personal information should be a top priority.
upvoted 0 times
...
Nickolas
9 months ago
I see your point, but I still believe option D is the best way to ensure personal information is only kept for as long as necessary.
upvoted 0 times
...
Merilyn
10 months ago
I think option C is also a good choice, as it ensures personal information is retained for a reasonable period of time.
upvoted 0 times
...
Dona
10 months ago
I agree, option D makes the most sense in terms of privacy protection.
upvoted 0 times
...
...
Carissa
11 months ago
But what about privacy concerns? Shouldn't personal information be deleted after a certain period of time to protect individuals?
upvoted 0 times
...
Sherell
11 months ago
I agree with Cathrine. It's important to keep personal information for the intended purpose.
upvoted 0 times
...
Cathrine
11 months ago
I think personal information should be retained as long as necessary for the fulfillment of the purpose of the collection.
upvoted 0 times
...
Jade
11 months ago
I believe personal information should not be retained at all to protect privacy.
upvoted 0 times
...
Isidra
11 months ago
I agree with Valentin. It's important to keep personal information for the intended purpose.
upvoted 0 times
...
Valentin
11 months ago
I think personal information should be retained as long as necessary for the fulfillment of the purpose of the collection.
upvoted 0 times
...

Save Cancel