Isaca CDPSE Exam - Topic 2 Question 39 Discussion

Actual exam question for Isaca's CDPSE exam

Question #: 39
Topic #: 2

[All CDPSE Questions]

Who is ULTIMATELY accountable for the protection of personal data collected by an organization?

AData processor

BData owner

CData custodian

DData protection officer

Show Suggested Answer

Suggested Answer: B

The data owner is the person or entity who has the ultimate authority and responsibility for the protection of personal data collected by an organization. The data owner defines the purpose, scope, classification, and retention of the personal data, as well as the rights and obligations of the data subjects and other parties involved in the data processing. The data owner also ensures that the personal data is handled in compliance with the applicable privacy laws and regulations, as well as the organization's privacy policies and standards. The data owner may delegate some of the operational tasks to the data processor, data custodian, or data protection officer, but the accountability remains with the data owner.

by Heidy at Apr 23, 2024, 10:49 AM

Limited Time Offer

25%

Off

Get Premium CDPSE Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Inocencia

3 months ago

Wait, so the data owner is ultimately responsible? That seems a bit risky!

upvoted 0 times

...

Karon

3 months ago

Really? I thought it was the custodian who handles the data directly.

upvoted 0 times

...

Salena

3 months ago

But what about the data protection officer? They have a big role too.

upvoted 0 times

...

Beatriz

4 months ago

I agree, the data owner has the final say!

upvoted 0 times

...

Ligia

4 months ago

It's definitely the data owner. They decide how data is used.

upvoted 0 times

...

Darrin

4 months ago

I’m torn between the data owner and the data protection officer. I wish I could recall more from the case studies we reviewed.

upvoted 0 times

...

Maile

4 months ago

I feel like the data custodian has responsibilities, but I don't think they hold ultimate accountability. Maybe it's the data owner?

upvoted 0 times

...

Lucia

4 months ago

I remember a practice question where the data protection officer had a big role, but I don't know if they are the ones ultimately accountable.

upvoted 0 times

...

Yen

5 months ago

I think the data owner is ultimately accountable, but I'm not completely sure. It feels like we discussed this in class.

upvoted 0 times

...

Paola

5 months ago

I'm pretty confident the answer is B - the data owner. They are the ones who collected the data and have the ultimate accountability for ensuring it is properly protected, even if they delegate some of the operational tasks.

upvoted 0 times

...

Jerry

5 months ago

The data custodian seems like the most logical answer here. They are the ones actually managing and maintaining the data on a day-to-day basis, so they would have the most direct responsibility for its protection.

upvoted 0 times

...

Anastacia

5 months ago

Hmm, I'm not sure about this one. I know the data protection officer is responsible for overseeing data protection, but I'm not sure if they are ultimately accountable. Let me think this through a bit more.

upvoted 0 times

...

Yaeko

5 months ago

I think the data owner is ultimately responsible for protecting the personal data collected by the organization. They are the ones who own the data and need to ensure it's properly safeguarded.

upvoted 0 times

...

Eloisa

5 months ago

Okay, let's see. I'm pretty sure creating contacts from landing pages and capturing responses from campaigns are two of the steps. But I'm not sure about the third one.

upvoted 0 times

...