New Year Sale 2026! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

IAPP CIPP-E Exam - Topic 3 Question 92 Discussion

Actual exam question for IAPP's CIPP-E exam
Question #: 92
Topic #: 3
[All CIPP-E Questions]

In the wake of the Schrems II ruling, which of the following actions has been recommended by the EDPB for companies transferring personal data to third countries?

Show Suggested Answer Hide Answer
Suggested Answer: A

Contribute your Thoughts:

0/2000 characters
Cristen
3 months ago
C seems excessive, can’t imagine getting consent for every transfer!
upvoted 0 times
...
Mila
4 months ago
B is unrealistic, no encryption is truly unbreakable.
upvoted 0 times
...
Lili
4 months ago
Wait, are they really suggesting A? Sounds complicated!
upvoted 0 times
...
Marget
4 months ago
I disagree, D is more secure. Keeping data in the EU is safer.
upvoted 0 times
...
Clemencia
4 months ago
A is definitely the way to go! Risk-based approach makes sense.
upvoted 0 times
...
Vanda
5 months ago
Storing all data within the EU seems too extreme. I don't think that's what the EDPB recommended, so I'm leaning away from option D.
upvoted 0 times
...
Merilyn
5 months ago
I think we practiced a question about needing consent for data transfers, but I don't recall it being as strict as option C suggests.
upvoted 0 times
...
Domitila
5 months ago
I'm not entirely sure, but I feel like there was something about encryption being important. Was it option B?
upvoted 0 times
...
Royal
5 months ago
I remember we discussed the importance of a risk-based approach in class, especially after Schrems II. I think option A sounds right.
upvoted 0 times
...
Xochitl
5 months ago
I'm not too sure about this one. The Schrems II ruling seems important, but I'm not familiar enough with the EDPB's specific recommendations. I'll have to guess and hope for the best on this question.
upvoted 0 times
...
Desmond
5 months ago
Okay, I've got this. The EDPB has recommended a risk-based approach and implementing supplementary measures for data transfers, not just blanket encryption or getting consent for every transfer. I'm pretty confident that option A is the correct answer.
upvoted 0 times
...
Glory
5 months ago
Hmm, I'm a bit confused by this question. I know the Schrems II ruling had something to do with data transfers to third countries, but I'm not sure of the specifics. I'll need to review my notes on that before attempting this.
upvoted 0 times
...
Dawne
5 months ago
I think the key here is to focus on the EDPB's recommendations after the Schrems II ruling. Option A sounds like the right approach - a risk-based assessment and implementing supplementary measures as needed.
upvoted 0 times
...
Lea
5 months ago
Hmm, I'm a bit unsure about this one. I know the Search UI and Sitecore Buckets both involve search, but I can't remember which specific API they use. I'll have to think this through carefully.
upvoted 0 times
...
Avery
1 year ago
Unbreakable encryption? Good luck finding that unicorn! The EDPB is clearly keeping it real with a risk-based approach. I bet the other options were suggested by someone who's never had to deal with data transfers in the real world.
upvoted 0 times
...
Selma
1 year ago
Storing all personal data within the EU? That's like locking your data in a fortress. I'd rather take my chances with supplementary measures outside the border. Sounds like the EDPB is trying to keep it simple for us.
upvoted 0 times
Yuki
1 year ago
A) Adopting a risk-based approach and implementing supplementary measures as needed.
upvoted 0 times
...
Florinda
1 year ago
Storing data within the EU might be secure, but it's not always practical.
upvoted 0 times
...
Muriel
1 year ago
A) Adopting a risk-based approach and implementing supplementary measures as needed.
upvoted 0 times
...
...
Alyce
1 year ago
I believe A is the correct answer because it aligns with the EDPB recommendations.
upvoted 0 times
...
Deja
1 year ago
I'm not sure, but I think A is the best option.
upvoted 0 times
...
Alpha
1 year ago
I agree with Louann, A makes sense.
upvoted 0 times
...
Ashley
1 year ago
Getting explicit consent for every data transfer? Are they serious? That would be a logistical nightmare. Adopting a risk-based approach is the way to go, in my opinion.
upvoted 0 times
Allene
1 year ago
Storing all personal data within the EU may not always be possible, so additional measures are necessary.
upvoted 0 times
...
Ahmed
1 year ago
It's important for companies to assess the risks involved in data transfers to ensure compliance.
upvoted 0 times
...
Ricki
1 year ago
Adopting a risk-based approach and implementing supplementary measures seems like a more feasible solution.
upvoted 0 times
...
Paz
1 year ago
I agree, obtaining explicit consent for every data transfer would be impractical.
upvoted 0 times
...
...
Maia
2 years ago
The EDPB recommendation of a risk-based approach with supplementary measures seems like the most practical solution. I'm glad they didn't go for the 'unbreakable encryption' option - that's just asking for trouble!
upvoted 0 times
Shaunna
1 year ago
That could be a challenge for some companies, but it's important to consider.
upvoted 0 times
...
Joesph
1 year ago
D) Storing all personal data within the borders of the European Union.
upvoted 0 times
...
Wilbert
1 year ago
I agree, it's definitely a more practical approach.
upvoted 0 times
...
Anabel
1 year ago
A) Adopting a risk-based approach and implementing supplementary measures as needed.
upvoted 0 times
...
...
Louann
2 years ago
I think the answer is A.
upvoted 0 times
...

Save Cancel