Free Isaca CDPSE Exam Dumps

Sensitive personal data is a subset of personal data that reveals or relates to more intimate or confidential aspects of a person's identity, such as their racial or ethnic origin, religious or philosophical beliefs, health status, sexual orientation, political opinions, trade union membership, biometric or genetic data, or criminal record. Sensitive personal data is subject to more stringent legal and regulatory protections and requires a higher level of consent from the data subject to be processed. Mailing address, bank account login ID, and contact phone number are examples of personal data, but not sensitive personal data, as they do not reveal or relate to such intimate or confidential aspects of a person's identity.

The data controller determines the purposes and means of processing and therefore retains primary accountability for risk---even if a processor or custodian executes processing. Data processors (C) act under instructions; custodians (A) safeguard data but do not define processing; data scientists (B) are operational users, not accountable owners.

''The data controller remains accountable for compliance and risk regardless of outsourcing processing activities.''