Discuss Isaca CDPSE Exam Topic 10 Question 77

Which of the following is the MOST important consideration when determining retention periods for personal data?

ASectoral best practices for the industry

BNotice provided to customers during data collection

CData classification standards

DStorage capacity available for retained data

Suggested Answer: B

The notice provided to customers during data collection is the most important consideration when determining retention periods for personal data, as it reflects the transparency and accountability principles of privacy and the expectations and preferences of the data subjects. The notice should inform the customers about the purposes and legal bases of the data processing, the rights and choices of the customers, and the safeguards and measures to protect the data, including how long the data will be kept and when it will be deleted or disposed of. The notice should also be consistent with the applicable laws and regulations that may prescribe or limit the retention periods for certain types of personal data. The other options are not as important as the notice provided to customers during data collection when determining retention periods for personal data. Sectoral best practices for the industry may provide some guidance or benchmarks for retention periods, but they may not reflect the specific context or needs of the organization or the customers. Data classification standards may help to categorize data according to its sensitivity and value, but they may not indicate how long the data should be retained or deleted.Storage capacity available for retained data may affect the feasibility or cost of retaining data, but it should not determine or override the retention periods based on privacy principles, laws or customer expectations1, p.99-100Reference:1: CDPSE Review Manual (Digital Version)

Get Premium CDPSE Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

12 comments · newest first

Melda 3 months ago

C makes sense too. Classifying data helps determine retention.

Georgiann 3 months ago

I prefer B. Customers should know how long data is kept.

Jade 3 months ago

I think A is the most important. Industry standards matter a lot.

Estrella 3 months ago

Really? I thought it was all about customer notice!

Caren 3 months ago

Wait, D) Storage capacity? That seems off...

Pauline 4 months ago

C) Data classification standards should definitely be a priority.

Rocco 5 months ago

I think B) Notice is super important too.

Wei 5 months ago

A) Sectoral best practices are key!

Wilford 6 months ago

Storage capacity seems less relevant compared to the other options, but I could see how it might play a role in some cases.

Herminia 6 months ago

I feel like notice provided to customers is important, but I’m not convinced it’s the most critical factor.

Glynda 6 months ago

I remember a practice question that emphasized the importance of data classification standards. Could that be the right answer here?

Stephaine 6 months ago

I think the most important consideration might be sectoral best practices, but I'm not entirely sure. We discussed this in class, and it seemed crucial.

Isaca CDPSE Exam - Topic 10 Question 77 Discussion