U.S. Independence Day Deal! Unlock 25% OFF Today – Limited-Time Offer - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

IAPP CIPP-E Exam - Topic 7 Question 53 Discussion

SCENARIOPlease use the following to answer the next question:Joe started the Gummy Bear Company in 2000 from his home in Vermont, US
A) Today, it is a multi-billion-dollar candy company operating in every continent. All of the company's IT servers are located in Vermont. This year Joe hires his son Ben to join the company and head up Project Big, which is a major marketing strategy to triple gross revenue in just 5 years. Ben graduated with a PhD in computer software from a top university. Ben decided to join his father's company, but is also secretly working on launching a new global online dating website company called Ben Knows Best. Ben is aware that the Gummy Bear Company has millions of customers and believes that many of them might also be interested in finding their perfect match. For Project Big, Ben redesigns the company's online web portal and requires customers in the European Union and elsewhere to provide additional personal information in order to remain a customer. Project Ben begins collecting data about customers' philosophical beliefs, political opinions and marital status. If a customer identifies as single, Ben then copies all of that customer's personal data onto a separate database for Ben Knows Best. Ben believes that he is not doing anything wrong, because he explicitly asks each customer to give their consent by requiring them to check a box before accepting their information. As Project Big is an important project, the company also hires a first year college student named Sam, who is studying computer science to help Ben out. Ben calls out and Sam comes across the Ben Knows Best database. Sam is planning on going to Ireland over Spring Beak with 10 of his friends, so he copies all of the customer information of people that reside in Ireland so that he and his friends can contact people when they are in Ireland. Joe also hires his best friend's daughter, Alice, who just graduated from law school in the U.S., to be the company's new General Counsel. Alice has heard about the GDPR, so she does some research on it. Alice approaches Joe and informs him that she has drafted up Binding Corporate Rules for everyone in the company to follow, as it is important for the company to have in place a legal mechanism to transfer data internally from the company's operations in the European Union to the U.S. Joe believes that Alice is doing a great job, and informs her that she will also be in-charge of handling a major lawsuit that has been brought against the company in federal court in the U.S. To prepare for the lawsuit, Alice instructs the company's IT department to make copies of the computer hard drives from the entire global sales team, including the European Union, and send everything to her so that she can review everyone's information. Alice believes that Joe will be happy that she did the first level review, as it will save the company a lot of money that would otherwise be paid to its outside law firm. Ben's collection of additional data from customers created several potential issues for the company, which would most likely require what? and A) New corporate governance and code of conduct.
B) A data protection impact assessment.
C) A comprehensive data inventory.
D) Hiring a data protection officer.

IAPP CIPP-E Exam - Topic 7 Question 53 Discussion

Actual exam question for IAPP's CIPP-E exam
Question #: 53
Topic #: 7
[All CIPP-E Questions]

SCENARIO

Please use the following to answer the next question:

Joe started the Gummy Bear Company in 2000 from his home in Vermont, US

Show Suggested Answer Hide Answer
Suggested Answer: A, A

Contribute your Thoughts:

0/2000 characters
Pete
7 months ago
Wait, they're collecting that much personal info? That's kinda sketchy.
upvoted 0 times
...
Noah
8 months ago
Hiring a data protection officer is a must at this point!
upvoted 0 times
...
Aleta
8 months ago
Really? Do they even need that? Seems like overkill.
upvoted 0 times
...
Talia
8 months ago
Definitely needs a data protection impact assessment.
upvoted 0 times
...
Georgiann
8 months ago
Wow, I can't believe Gummy Bear Co. is worth billions now!
upvoted 0 times
...
Dahlia
8 months ago
I thought corporate governance was more about overall company policies, not just data issues. Could that really be the answer?
upvoted 0 times
...
Glynda
8 months ago
I feel like the GDPR implications are huge here, so maybe they should definitely consider hiring a data protection officer.
upvoted 0 times
...
Leah
8 months ago
I'm not entirely sure, but I think a comprehensive data inventory might be necessary too, right? It seems like they need to know what data they have.
upvoted 0 times
...
Queenie
8 months ago
I remember we discussed the importance of data protection impact assessments in class, especially when handling sensitive customer data.
upvoted 0 times
...
Jordan
9 months ago
Hmm, I'm not totally sure about this one. I'll have to think it through carefully.
upvoted 0 times
...
Vallie
9 months ago
No problem, I've got this. I just need to apply the right formula and do the calculations. Option C looks like the correct answer.
upvoted 0 times
...
Dierdre
9 months ago
Hmm, I'm not entirely sure about this one. The components of a Quarterly Review can vary quite a bit depending on the company and industry. I'll need to think through each option carefully and try to eliminate the ones that don't seem quite right.
upvoted 0 times
...
Avery
9 months ago
I'm a bit unsure about this one. There are a lot of options related to purchasing, but I'm not sure which two would be the best fit for the scenario. I'll need to think this through carefully.
upvoted 0 times
...

Save Cancel