IAPP CIPP-E Exam - Topic 7 Question 66 Discussion

Actual exam question for IAPP's CIPP-E exam

Question #: 66
Topic #: 7

SCENARIO

Please use the following to answer the next question:

Sandy recently joined Market4U, an advertising technology company founded in 2016, as their VP of Privacy and Data Governance. Through her first initiative in conducting a data inventory, Sandy learned that Market4U maintains a list of 19 million global contacts that were collected throughout the course of Market4U's existence. Knowing the risk of having such a large amount of data, Sandy wanted to purge all contacts that were entered into Market4U's systems prior to May 2018, unless such contacts had a more recent interaction with Market4U content. However, Dan, the VP of Sales, informed Sandy that all of the contacts provide useful information regarding successful marketing campaigns and trends in industry verticals for Market4U's clients.

Dan also informed Sandy that he had wanted to focus on gaining more customers within the sports and entertainment industry. To assist with this behavior, Market4U's marketing team decided to add several new fields to Market4U's website forms, including forms for downloading white papers, creating accounts to participate in Market4U's forum, and attending events. Such fields include birth date and salary.

What is the best way that Sandy can gain the insights that Dan seeks while still minimizing risks for Market4U?

AConduct analysis only on anonymized personal data.

BConduct analysis only on pseudonymized personal data.

CDelete all data collected prior to May 2018 after conducting the trend analysis.

DProcure a third party to conduct the analysis and delete the data from Market4U's systems.

Show Suggested Answer

Suggested Answer: B

by Rolande at Mar 02, 2023, 01:38 AM

Limited Time Offer

25%

Off

Get Premium CIPP-E Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Meaghan

4 months ago

Deleting old data seems risky, but necessary for privacy!

upvoted 0 times

...

Aleta

5 months ago

Wait, can you really trust third parties with your data?

upvoted 0 times

...

Bobbye

5 months ago

Anonymized data is the safest way to go!

upvoted 0 times

...

Miss

5 months ago

Totally agree with keeping useful data for trends!

upvoted 0 times

...

Jacob

5 months ago

Market4U has 19 million contacts? That's a lot!

upvoted 0 times

...

Talia

5 months ago

I wonder if bringing in a third party, like in option D, would really help mitigate risks, but it feels a bit extreme. I’m not sure if that’s necessary.

upvoted 0 times

...

Georgeanna

5 months ago

I feel like we practiced a similar question about data governance, and I think using anonymized data could be the safest route. Option A seems right.

upvoted 0 times

...

Annmarie

5 months ago

I'm not entirely sure, but I think pseudonymization could still allow for some insights without exposing personal data. So, option B might be a good choice.

upvoted 0 times

...

Carman

5 months ago

I remember discussing the importance of data minimization in class, so maybe option C makes sense since it involves deleting older data.

upvoted 0 times

...

Chau

6 months ago

I'm feeling pretty confident about this one. I remember learning that the Session AMBR is not part of the session establishment process, so I'll go with that.

upvoted 0 times

...

Reuben

6 months ago

Okay, I think I've got this. The question is asking about reducing the number of required VPLS services by using PBB, and option C seems to be the best answer - the 7750 SR supports mapping multiple standard VPLS services to a single B-VPLS service. That would definitely reduce the overall number of services needed.

upvoted 0 times

...

Val

10 months ago

Wait, they're collecting birth dates and salaries? I guess the sports and entertainment industry really is all about the money these days. Maybe they should just start a dating app instead - it would be a more honest use of all that personal data.

upvoted 0 times

...

Frederica

10 months ago

I'm pretty sure Dan just wants to secretly sell everyone's birth dates and salaries to the highest bidder. Maybe we should just tell him to start his own sports and entertainment gossip site instead.

upvoted 0 times

Irene

9 months ago

D) Procure a third party to conduct the analysis and delete the data from Market4U's systems.

upvoted 0 times

...

Sol

9 months ago

I'm pretty sure Dan just wants to secretly sell everyone's birth dates and salaries to the highest bidder. Maybe we should just tell him to start his own sports and entertainment gossip site instead.

upvoted 0 times

...

Frank

9 months ago

B) Conduct analysis only on pseudonymized personal data.

upvoted 0 times

...

Leonard

9 months ago

A) Conduct analysis only on anonymized personal data.

upvoted 0 times

...

Christiane

10 months ago

Option D is an interesting idea, but I'm not sure I'd want to hand over all of that sensitive data to a third party. Pseudonymization seems like the most elegant solution here - it maintains the utility of the data while minimizing the risks.

upvoted 0 times

Alease

9 months ago

upvoted 0 times

...

Carmen

9 months ago

B) Conduct analysis only on pseudonymized personal data.

upvoted 0 times

...

Timothy

10 months ago

A) Conduct analysis only on anonymized personal data.

upvoted 0 times

...

Iesha

11 months ago

I'm not a big fan of option C. Deleting all the data collected prior to May 2018 could lead to a loss of valuable insights and historical trends. It's better to find a way to retain and analyze the data while still protecting individual privacy.

upvoted 0 times

Harley

9 months ago

D) Procure a third party to conduct the analysis and delete the data from Market4U's systems.

upvoted 0 times

...

Emerson

9 months ago

I agree, option C seems too drastic. We need to find a balance between insights and privacy.

upvoted 0 times

...

Beckie

9 months ago

B) Conduct analysis only on pseudonymized personal data.

upvoted 0 times

...

Mindy

10 months ago

A) Conduct analysis only on anonymized personal data.

upvoted 0 times

...

Broderick

11 months ago

Option A sounds like a good idea, but I'm not sure if it would provide the level of detail that Dan is looking for. Pseudonymization seems like a reasonable compromise between privacy and business needs.

upvoted 0 times

Lynna

9 months ago

D) Procure a third party to conduct the analysis and delete the data from Market4U's systems.

upvoted 0 times

...

Gracia

10 months ago

C) Delete all data collected prior to May 2018 after conducting the trend analysis.

upvoted 0 times

...

Devora

10 months ago

B) Conduct analysis only on pseudonymized personal data.

upvoted 0 times

...

Amie

10 months ago

A) Conduct analysis only on anonymized personal data.

upvoted 0 times

...

Desmond

10 months ago

D) Procure a third party to conduct the analysis and delete the data from Market4U's systems.

upvoted 0 times

...

Viva

10 months ago

B) Conducting analysis on pseudonymized data would protect privacy while still providing valuable insights.

upvoted 0 times

...

Keshia

11 months ago

B) Conduct analysis only on pseudonymized personal data.

upvoted 0 times

...

Kiera

11 months ago

A) Conduct analysis only on anonymized personal data.

upvoted 0 times

...

Cordie

11 months ago

But what about the useful information from the contacts? Maybe Sandy can consider option D and procure a third party for analysis.

upvoted 0 times

...

Wava

11 months ago

I think option B is the best choice here. Conducting analysis on pseudonymized personal data would allow Market4U to gain the insights they need while still minimizing the risks associated with holding onto such a large amount of personal data.

upvoted 0 times