MENU
A company in France suffers a robbery over the weekend owing to a faulty alarm system. When it is determined that the break-in involves the loss of a substantial amount of data, the company decides on a CCTV system to monitor for future incidents. Company technicians install cameras in the entrance of the building, hallways and offices. Footage is recorded continuously, and is monitored by the home office in the United States. What is the most realistic step the company could take to address their security concerns and comply with the personal data processing principles set out in Article 5 of the GDPR?
Suggested Answer: A
Get Premium CIPP/E Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
14 comments · newest first
SH
Shenika
1 year ago
Not sure if 30 days is really enough for security purposes.
CH
Chauncey
1 year ago
Surprised they didn’t consider limiting camera placement more!
ME
Merlyn
1 year ago
Recording only during work hours seems reasonable too.
AY
Ayesha
1 year ago
Agree, consent from employees is tricky and might not be enough.
MA
Marylyn
1 year ago
I think retaining footage for no more than 30 days is a must.
WI
William
1 year ago
I think restricting cameras to entrances might not be enough. We need to consider the whole building for security, right?
MA
Marge
1 year ago
I feel like having cameras only during work hours could help, but I'm not sure if that fully addresses the GDPR principles.
MA
Marta
1 year ago
I remember we discussed the importance of retaining footage for a limited time to comply with GDPR. Option C seems like a good choice.
JA
Jacquelyne
1 year ago
I'm not entirely sure, but I think seeking consent from employees might be tricky. It could lead to complications if they don't agree.
SY
Sylvia
1 year ago
Okay, let me think this through. Stanley was collecting evidence to present to a jury, so the evidence would need to be believable and complete, right? I'm leaning towards "complete" as the best answer.
LA
Laurena
1 year ago
Hmm, I'm not totally sure about this one. I'll need to think carefully about the capabilities of ServiceNow and the types of documents it might handle.
MA
Malcom
1 year ago
I think the answer is A. The 'with_items' loop is used to iterate over a list of items, which seems to be what we need here to create the three Loopback interfaces.
SK
Skye
1 year ago
I feel like "risk reduction" is relevant too, but it seems more general. Mitigation feels more specific to lowering known risks.
TH
Thersa
1 year ago
I've got a strategy - I'll eliminate the options that don't seem to match the question, then choose the best fit from the remaining choices.