IAPP CIPP-E Exam - Topic 8 Question 97 Discussion

Actual exam question for IAPP's CIPP-E exam

Question #: 97
Topic #: 8

Since blockchain transactions are classified as pseudonymous, are they considered to be within the material scope of the GDPR or outside of it?

AOutside the material scope of the GDPR, because transactions do not include personal data about data subjects m the European Union.

BWithin the material scope of the GDPR but outside of the territorial scope, because blockchains are decentralized.

CWithin the material scope of the GDPR to the extent that transactions include data subjects in the European Union.

DOutside the material scope of the GDPR, because transactions are for personal or household purposes

Show Suggested Answer

Suggested Answer: C

by Veda at Sep 16, 2024, 06:37 AM

Limited Time Offer

25%

Off

Get Premium CIPP-E Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Anika

5 months ago

B is interesting, but decentralization complicates things!

upvoted 0 times

...

Theodora

5 months ago

A seems right, no personal data means no GDPR.

upvoted 0 times

...

Isaiah

6 months ago

Wait, are we sure about that? I thought blockchain was anonymous.

upvoted 0 times

...

Hana

6 months ago

Totally agree with C, personal data is key here.

upvoted 0 times

...

Dante

6 months ago

I think it's C, if EU citizens are involved, GDPR applies.

upvoted 0 times

...

Weldon

6 months ago

I thought we agreed that decentralized systems like blockchains complicate things, but I’m not clear if that means they’re outside the GDPR's reach.

upvoted 0 times

...

Tequila

6 months ago

I feel like option A might be too simplistic since blockchain can still relate to individuals indirectly. I wonder if that means it’s actually within the scope?

upvoted 0 times

...

Elenore

7 months ago

I’m not entirely sure, but I think we covered a similar question in class, and it leaned towards the idea that if personal data is involved, it could fall under GDPR.

upvoted 0 times

...

Gladys

7 months ago

I remember discussing how pseudonymous data can still be linked to individuals, so I think it might be within the GDPR scope if it involves EU data subjects.

upvoted 0 times

...

Yesenia

7 months ago

I'm feeling pretty confident about this one. The key is to distinguish between the material and territorial scope of the GDPR, and apply that to the specifics of blockchain transactions.

upvoted 0 times

...

Alesia

7 months ago

Okay, I think I've got a strategy here. I'll focus on whether the blockchain transactions involve personal data of EU data subjects, and then consider the territorial scope of the GDPR.

upvoted 0 times

...

Raelene

7 months ago

Hmm, I'm a bit confused on this one. I'll need to review the GDPR material again to make sure I understand the key concepts.

upvoted 0 times

...

Edna

7 months ago

This is a tricky one. I'll need to think carefully about the scope of the GDPR and how it applies to blockchain transactions.

upvoted 0 times

...

Barney

2 years ago

I disagree, I believe blockchain transactions are outside the material scope of the GDPR.

upvoted 0 times

...

Elena

2 years ago

A personal or household blockchain transaction? What is this, the 1990s? I'm going with C, the only sensible choice here.

upvoted 0 times

...

Jaleesa

2 years ago

Hmm, I don't think the answer is D. Household purposes? Come on, this is an enterprise-level blockchain question!

upvoted 0 times

Evangelina

2 years ago

I agree, it's definitely not D. This is about data protection, not household chores.

upvoted 0 times

...

Hollis

2 years ago

C) Within the material scope of the GDPR to the extent that transactions include data subjects in the European Union.

upvoted 0 times

...

Dan

2 years ago

A) Outside the material scope of the GDPR, because transactions do not include personal data about data subjects in the European Union.

upvoted 0 times

...

Paz

2 years ago

Wow, this is a tricky one! I'm leaning towards B, since blockchains are decentralized, but I'm not 100% sure.

upvoted 0 times

Leonard

2 years ago

Good point, but I still think it's C because the GDPR aims to protect the rights of EU data subjects.

upvoted 0 times

...

Ludivina

2 years ago

That's true, but personal data protection is a key aspect of the GDPR, so it could also be A.

upvoted 0 times

...

Fernanda

2 years ago

I agree with you, but I also see the point for option B since blockchains are decentralized.

upvoted 0 times

...

Laquita

2 years ago

I think it's C, because transactions involving data subjects in the EU are within the material scope of the GDPR.

upvoted 0 times

...

Jani

2 years ago

I agree with Estrella, but they are outside the territorial scope because blockchains are decentralized.

upvoted 0 times

...

Angelica

2 years ago

I'm pretty sure the answer is C. Blockchain transactions that include data subjects in the EU are within the GDPR's material scope, even though the transactions are pseudonymous.

upvoted 0 times