MENU
Which of the following scenarios should trigger the completion of a privacy impact assessment (PIA)?
Suggested Answer: B
Get Premium CDPSE Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
38 comments · newest first
EL
Elenore
11 months ago
Really? Updates to the enterprise data policy don’t need a PIA? That seems off.
LI
Lindsey
11 months ago
I agree with B, but I’m surprised A isn’t included.
PR
Precious
11 months ago
C seems important too, but I'm not sure about D.
JA
Jarod
11 months ago
I think A should also trigger a PIA. Data quality matters!
LE
Leslie
12 months ago
Definitely B! New inter-org data flows are a big deal.
CO
Cora
12 months ago
I feel like any significant changes, especially new data flows, should always prompt a PIA, but I wonder if updates to the enterprise data policy would too.
RO
Rolande
12 months ago
Updates to data quality standards seem less likely to trigger a PIA, but I could be mistaken.
RU
Ruth
1 year ago
I remember practicing a question about data retention policies and how they might require a PIA, but I can't recall if it was a definite yes or no.
LO
Louann
1 year ago
I think a PIA is definitely needed for new inter-organizational data flows, but I'm not sure about the others.
EM
Emerson
1 year ago
I'm a bit confused on the difference between data quality standards, data retention policies, and enterprise data policy. Do those all require a PIA, or just some of them? I'll have to review my notes on that.
AF
Afton
1 year ago
Okay, let's see. I remember from the course that a PIA is required for any new or significantly changed data processing activities. So I'd say B and C are the most likely answers here.
MI
Mindy
1 year ago
Hmm, I'm not sure about this one. I know a PIA is needed for changes that could impact privacy, but I'm not totally clear on the specific triggers. I'll have to think this through carefully.
NG
Nguyet
1 year ago
This question seems straightforward, I think the answer is B - new inter-organizational data flows would definitely require a privacy impact assessment.
AD
Adelina
1 year ago
Okay, I've got this. The two important variables for authenticating the client are PHP_AUTH_USER and PHP_AUTH_PASSWORD.
HE
Herschel
1 year ago
Hmm, I'm a little unsure about this one. I'll need to think it through carefully.
DO
Dolores
1 year ago
The key here is that the auditee immediately addressed the issue when the auditor pointed it out. I think that's a positive sign and should be noted.
NA
Natalya
1 year ago
I don't know about you, but I'm just hoping the correct answer isn't 'E) Randomly delete all the data and see what happens.' That's probably not the best privacy practice.
SC
Scarlet
1 year ago
C) New data retention and backup policies
AN
An
1 year ago
B) New inter-organizational data flows
AR
Ariel
1 year ago
A) Updates to data quality standards
AR
Arlette
1 year ago
Hold up, are we sure this isn't a trick question? What if the answer is 'all of the above'? You can never be too careful when it comes to privacy, you know.
SY
Sylvie
1 year ago
I'm going with C) New data retention and backup policies. Changing how long we store data or how we back it up could have privacy implications that need to be assessed.
AR
Arthur
1 year ago
Updates to the enterprise data policy might also require a PIA to ensure privacy compliance.
FE
Felix
1 year ago
I think new inter-organizational data flows could also trigger a privacy impact assessment.
CA
Carline
1 year ago
I agree, changes to data retention and backup policies can definitely impact privacy.
BE
Belen
1 year ago
Hmm, I'm not sure. D) Updates to the enterprise data policy seems like it could also trigger a PIA. We need to make sure any changes to data policies don't compromise privacy.
KA
Kallie
1 year ago
D) Updates to the enterprise data policy
CR
Craig
1 year ago
C) New data retention and backup policies
AR
Arlie
1 year ago
B) New inter-organizational data flows
MU
Murray
1 year ago
A) Updates to data quality standards
RO
Rodney
1 year ago
I believe C) New data retention and backup policies should also trigger a PIA, as it involves handling sensitive data.
MA
Margurite
1 year ago
I agree with Shawnee. When data flows between organizations, there's a higher risk to privacy.
SH
Shawnee
2 years ago
I think B) New inter-organizational data flows should trigger a PIA.
BA
Barrett
2 years ago
I think the correct answer is B) New inter-organizational data flows. Introducing new data-sharing between organizations would definitely require a privacy impact assessment.
VE
Velda
1 year ago
Updates to the enterprise data policy could impact privacy, so it's important to assess the implications.
OR
Orville
1 year ago
New data retention and backup policies might also require a PIA to ensure data privacy is maintained.
LA
Lasandra
1 year ago
I think updates to data quality standards could also trigger a privacy impact assessment.
BR
Bronwyn
1 year ago
I agree, new inter-organizational data flows can have significant privacy implications.