Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Isaca CDPSE Exam - Topic 10 Question 77 Discussion

Actual exam question for Isaca's CDPSE exam
Question #: 77
Topic #: 10
[All CDPSE Questions]

Which of the following is the MOST important consideration when determining retention periods for personal data?

Show Suggested Answer Hide Answer
Suggested Answer: B

The notice provided to customers during data collection is the most important consideration when determining retention periods for personal data, as it reflects the transparency and accountability principles of privacy and the expectations and preferences of the data subjects. The notice should inform the customers about the purposes and legal bases of the data processing, the rights and choices of the customers, and the safeguards and measures to protect the data, including how long the data will be kept and when it will be deleted or disposed of. The notice should also be consistent with the applicable laws and regulations that may prescribe or limit the retention periods for certain types of personal data. The other options are not as important as the notice provided to customers during data collection when determining retention periods for personal data. Sectoral best practices for the industry may provide some guidance or benchmarks for retention periods, but they may not reflect the specific context or needs of the organization or the customers. Data classification standards may help to categorize data according to its sensitivity and value, but they may not indicate how long the data should be retained or deleted.Storage capacity available for retained data may affect the feasibility or cost of retaining data, but it should not determine or override the retention periods based on privacy principles, laws or customer expectations1, p.99-100Reference:1: CDPSE Review Manual (Digital Version)


Contribute your Thoughts:

0/2000 characters
Herminia
4 days ago
I feel like notice provided to customers is important, but I’m not convinced it’s the most critical factor.
upvoted 0 times
...
Glynda
9 days ago
I remember a practice question that emphasized the importance of data classification standards. Could that be the right answer here?
upvoted 0 times
...
Stephaine
14 days ago
I think the most important consideration might be sectoral best practices, but I'm not entirely sure. We discussed this in class, and it seemed crucial.
upvoted 0 times
...

Save Cancel