IIA Exam IIA-CIA-Part3-3P Topic 10 Question 61 Discussion

Actual exam question for IIA's IIA-CIA-Part3-3P exam

Question #: 61
Topic #: 10

Which of the following should internal auditors be attentive of when reviewing personal data consent and opt-in/opt-out management process?

AWhether customers are asked to renew their consent for their data processing at least quarterly.

BWhether private data is processed in accordance with the purpose for which the consent was obtained.

CWhether the organization has established explicit and entitywide policies on data transfer to third parties.

DWhether customers have an opportunity to opt-out the right to be forgotten from organizational records and systems.

Show Suggested Answer

Suggested Answer: B

by Elza at Jan 15, 2025, 12:03 PM

Limited Time Offer

25%

Off

Get Premium IIA-CIA-Part3-3P Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Kerrie

2 months ago

Quarterly consent renewal? What is this, a subscription box service? B) and D) are the way to go.

upvoted 0 times

...

Eleonora

2 months ago

C) is also vital. Clear policies on third-party data sharing are a must-have these days.

upvoted 0 times

...

Venita

2 months ago

I agree, B) and D) cover the key aspects. Quarterly consent renewal seems a bit excessive though.

upvoted 0 times

German

23 days ago

User 3: Quarterly consent renewal does seem a bit too frequent, but it's important to regularly review and update consent processes.

upvoted 0 times

...

Kaycee

25 days ago

User 2: I agree, making sure data is used for the intended purpose and giving customers the right to be forgotten are crucial.

upvoted 0 times

...

Octavio

26 days ago

User 1: I think B) and D) are the most important points to consider.

upvoted 0 times

...

3 months ago

I think internal auditors should be attentive to option B.

upvoted 0 times

...