IAPP CIPP-E Exam - Topic 8 Question 85 Discussion

Actual exam question for IAPP's CIPP-E exam

Question #: 85
Topic #: 8

A company plans to transfer employee health information between two of its entities in France. To maintain the security of the processing, what would be the most important security measure to apply to the health data transmission?

AInform the data subject of the security measures in place.

BEnsure that the receiving entity has signed a data processing agreement.

CEncrypt the transferred data in transit and at rest.

DConduct a data protection impact assessment.

Show Suggested Answer

Suggested Answer: A

According to the EDPB Guidelines 05/2020 on consent under Regulation 2016/6791, valid consent for the use of cookies must meet the following conditions:

* It must be freely given, which means that the data subject must have a genuine choice and the ability to refuse or withdraw consent without detriment.

* It must be specific, which means that the data subject must give consent for each distinct purpose of the processing and for each type of cookie.

* It must be informed, which means that the data subject must receive clear and comprehensive information about the identity of the controller, the purposes of the processing, the types of cookies used, the duration of the cookies, and the possibility of withdrawing consent.

* It must be unambiguous, which means that the data subject must express their consent by a clear affirmative action, such as clicking on an ''I agree'' button or selecting specific settings in a cookie banner.

* It must be granular, which means that the data subject must be able to consent to different types of cookies separately, such as essential, functional, performance, or marketing cookies.

Therefore, a ''Cookies Settings'' button is not a necessary element to collect valid consent for the use of cookies, as long as the data subject can exercise their choice and preference through other means, such as a cookie banner with different options. However, a ''Cookies Settings'' button may be a good practice to enhance transparency and user control, as it allows the data subject to access and modify their consent settings at any time.

On the other hand, a ''Reject All'' cookies button is a necessary element to collect valid consent for the use of cookies, as it ensures that the data subject can freely refuse consent without detriment. A list of cookies that may be placed and information on the purpose of the cookies are also necessary elements to collect valid consent for the use of cookies, as they ensure that the data subject is informed and can give specific consent for each type of cookie.

by Eura at May 29, 2024, 12:39 AM

Limited Time Offer

25%

Off

Get Premium CIPP-E Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Amalia

4 months ago

C all the way! Can't be too careful with sensitive info.

upvoted 0 times

...

Patti

4 months ago

A is nice, but it doesn't really protect the data itself.

upvoted 0 times

...

Darrin

4 months ago

Surprised that people overlook D, impact assessments are crucial!

upvoted 0 times

...

Hannah

4 months ago

I think B is super important too, gotta have that agreement.

upvoted 0 times

...

Tegan

4 months ago

Definitely C, encryption is key for health data!

upvoted 0 times

...

Tiffiny

5 months ago

Conducting a data protection impact assessment sounds important, but I wonder if it’s as immediate as ensuring data is encrypted during transfer.

upvoted 0 times

...

Kattie

5 months ago

I vaguely recall something about informing data subjects, but I'm not convinced that's the most critical measure. It seems more like a formality.

upvoted 0 times

...

Vanesa

5 months ago

I'm not entirely sure, but I feel like a data processing agreement is crucial too. Maybe option B could be a strong contender?

upvoted 0 times

...

Garry

5 months ago

I remember we discussed the importance of encryption in our last class. I think option C might be the best choice here.

upvoted 0 times

...

Jodi

5 months ago

Hmm, this is a tricky one. I'm leaning towards the encryption option, but I'm not 100% sure. I'll have to review the material on data security measures again to make sure I'm making the right call here.

upvoted 0 times

...

Torie

5 months ago

Encrypting the data is definitely the way to go. That will ensure the information is protected during the transfer between the two entities. The other options, like informing the data subject or signing a data processing agreement, are important but not as critical for the actual security of the transmission.

upvoted 0 times

...

Elsa

5 months ago

I'm a bit unsure about this one. I know we need to ensure the security of the data, but I'm not sure if informing the data subject or conducting a data protection impact assessment would be the most important step here. I'll have to think this through carefully.

upvoted 0 times

...

Emilio

5 months ago

Hmm, this seems like a tricky one. I think the key here is to focus on the security of the data transmission itself. Encrypting the data in transit and at rest seems like the most important measure to me.

upvoted 0 times

...

Norah

6 months ago

This looks like a tricky question on cloud governance. I'll need to carefully read through the options and think about the key requirements for a multinational company's IT governance.

upvoted 0 times

...

Hui

6 months ago

I'm a little confused by the wording here. Is the question asking about the reason the team failed to implement multitopology, or the reason multitopology itself failed? I'll need to re-read this carefully.

upvoted 0 times

...

Melvin

6 months ago

I feel like 20% sounds familiar from a practice question we did, but then again, the 2000 Census could have different numbers than what we covered.

upvoted 0 times

...

Carlota

11 months ago

Conduct a data protection impact assessment? What is this, a security quiz for rocket scientists? Encrypt the data, and call it a day!

upvoted 0 times

Dorothea

10 months ago

Ensure that the receiving entity has signed a data processing agreement.

upvoted 0 times

...

Rosalyn

10 months ago

Inform the data subject of the security measures in place.

upvoted 0 times

...

Luis

10 months ago

Encrypt the transferred data in transit and at rest.

upvoted 0 times

...

Theresia

11 months ago

Haha, informing the data subject is like telling a bank robber where the gold is buried. Encryption is the way to go, my friends!

upvoted 0 times

Skye

9 months ago

D: It's important to take all necessary measures to protect sensitive information.

upvoted 0 times

...

Meghann

10 months ago

C: Encrypting the data in transit and at rest is crucial for maintaining security.

upvoted 0 times

...

Benedict

10 months ago

B: I agree, informing the data subject could pose a security risk.

upvoted 0 times

...

Jess

10 months ago

A: Encryption is definitely the best way to protect the health data.

upvoted 0 times

...

Ona

11 months ago

A data processing agreement is important, but encryption is the real deal-breaker here. Gotta keep that data locked down tight!

upvoted 0 times

...

Mila

11 months ago

I'd go with option C. Encrypting the data both in transit and at rest is crucial to maintaining the security and privacy of the health information.

upvoted 0 times

Dona

10 months ago

I agree, it's important to protect sensitive health information with encryption.

upvoted 0 times

...

An

10 months ago

Option C is definitely the way to go. Encrypting the data will keep it safe.

upvoted 0 times

...

Sherron

11 months ago

I also believe that conducting a data protection impact assessment would be crucial to identify and mitigate any potential risks.

upvoted 0 times

...

Leigha

11 months ago

I agree with Adelaide, encrypting the data would ensure the security of the health information during transmission.

upvoted 0 times

...

Malcolm

11 months ago

Encrypt the data, of course! That's the most important thing to protect sensitive health information. Anything less and it's like leaving the front door wide open.

upvoted 0 times

...

Adelaide

11 months ago

I think the most important security measure would be to encrypt the transferred data in transit and at rest.

upvoted 0 times

...