IAPP Exam CIPP-E Topic 6 Question 10 Discussion

Actual exam question for IAPP's CIPP-E exam

Question #: 10
Topic #: 6

A company in France suffers a robbery over the weekend owing to a faulty alarm system. When it is determined that the break-in involves the loss of a substantial amount of data, the company decides on a CCTV system to monitor for future incidents. Company technicians install cameras in the entrance of the building, hallways and offices. Footage is recorded continuously, and is monitored by the home office in the United States. What is the most realistic step the company could take to address their security concerns and comply with the personal data processing principles set out in Article 5 of the GDPR?

ASeek informed consent from company employees.

BHave cameras recording during work hours only.

CRetain captured footage for no more than 30 days.

DRestrict camera placement to building entrances only.

Show Suggested Answer

Suggested Answer: A

by Denise at May 06, 2022, 05:58 PM

Limited Time Offer

25%

Off

Get Premium CIPP-E Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Shenika

6 days ago

Not sure if 30 days is really enough for security purposes.

upvoted 0 times

...

Chauncey

12 days ago

Surprised they didn’t consider limiting camera placement more!

upvoted 0 times

...

Merlyn

17 days ago

Recording only during work hours seems reasonable too.

upvoted 0 times

...

Ayesha

22 days ago

Agree, consent from employees is tricky and might not be enough.

upvoted 0 times

...

Marylyn

28 days ago

I think retaining footage for no more than 30 days is a must.

upvoted 0 times

...

William

29 days ago

I think restricting cameras to entrances might not be enough. We need to consider the whole building for security, right?

upvoted 0 times

...

Marge

30 days ago

I feel like having cameras only during work hours could help, but I'm not sure if that fully addresses the GDPR principles.

upvoted 0 times

...

Marta

1 months ago

I remember we discussed the importance of retaining footage for a limited time to comply with GDPR. Option C seems like a good choice.

upvoted 0 times

...

Jacquelyne

1 months ago

I'm not entirely sure, but I think seeking consent from employees might be tricky. It could lead to complications if they don't agree.

upvoted 0 times

...

Sylvia

1 months ago

Okay, let me think this through. Stanley was collecting evidence to present to a jury, so the evidence would need to be believable and complete, right? I'm leaning towards "complete" as the best answer.

upvoted 0 times

...

Laurena

1 months ago

Hmm, I'm not totally sure about this one. I'll need to think carefully about the capabilities of ServiceNow and the types of documents it might handle.

upvoted 0 times

...

Malcom

1 months ago

I think the answer is A. The 'with_items' loop is used to iterate over a list of items, which seems to be what we need here to create the three Loopback interfaces.

upvoted 0 times

...

Skye

1 months ago

I feel like "risk reduction" is relevant too, but it seems more general. Mitigation feels more specific to lowering known risks.

upvoted 0 times

...

Thersa

1 months ago

I've got a strategy - I'll eliminate the options that don't seem to match the question, then choose the best fit from the remaining choices.

upvoted 0 times

...