Isaca CDPSE Exam - Topic 7 Question 49 Discussion

Actual exam question for Isaca's CDPSE exam

Question #: 49
Topic #: 7

An online business posts its customer data protection notice that includes a statement indicating information is collected on how products are used, the content viewed, and the time and duration of online activities. Which data protection principle is applied?

ASystem use requirements

BData integrity and confidentiality

CLawfulness and fairness

DData use limitation

Show Suggested Answer

Suggested Answer: C

The data protection principle that is applied when an online business posts its customer data protection notice that includes a statement indicating information is collected on how products are used, the content viewed, and the time and duration of online activities is lawfulness and fairness. Lawfulness and fairness are two of the core principles of data protection under various laws and regulations, such as the GDPR or the CCPA. They state that personal data should be processed lawfully, fairly and in a transparent manner in relation to the data subject. By posting a customer data protection notice that informs customers about what information is collected and for what purpose, the online business demonstrates its compliance with these principles.

System use requirements, data integrity and confidentiality, or data use limitation are not the correct names of the data protection principles that are applied in this case. System use requirements are not a specific principle of data protection, but rather a general term that refers to the rules or policies that govern how users can access and use a system or service. Data integrity and confidentiality are two aspects of the security principle of data protection, which states that personal data should be processed in a manner that ensures appropriate security of the personal data. Data use limitation is not a specific principle of data protection either, but rather a concept that relates to the purpose limitation principle, which states that personal data should be collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes.

by Edna at Aug 27, 2024, 03:06 AM

Limited Time Offer

25%

Off

Get Premium CDPSE Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Joanne

3 months ago

I agree with Melvin, it fits the data use limitation principle.

upvoted 0 times

...

Hyun

3 months ago

Wait, are they really tracking all that? Seems sketchy!

upvoted 0 times

...

Josefa

3 months ago

I think it’s about lawfulness and fairness.

upvoted 0 times

...

Lai

4 months ago

Definitely not just about use limitation, there's more to it.

upvoted 0 times

...

Melvin

4 months ago

Sounds like data use limitation to me!

upvoted 0 times

...

Serita

4 months ago

I practiced a similar question, and I think data integrity and confidentiality is more about protecting data rather than how it's used.

upvoted 0 times

...

Rebbecca

4 months ago

This sounds familiar, but I can't recall if system use requirements really fit. I might be mixing it up with another principle.

upvoted 0 times

...

Gail

4 months ago

I remember studying the principles, and I feel like lawfulness and fairness could apply here since they mention how data is collected.

upvoted 0 times

...

Britt

5 months ago

I think this question is about how data is used, so maybe it's related to data use limitation? But I'm not entirely sure.

upvoted 0 times

...

Amie

5 months ago

I'm a little confused by this question. The options cover different data protection principles, but I'm not sure which one specifically applies to the scenario described. I might need to review my notes on data protection principles to make sure I understand the differences between them. If I'm still unsure, I might have to guess.

upvoted 0 times

...

Janey

5 months ago

Okay, let me think this through. The question is asking about a data protection principle, and the statement talks about collecting information on product usage, content viewed, and online activity. I think the key here is that the business is collecting this data, so the principle of Lawfulness and fairness (option C) seems like the most relevant one. I'll go with that.

upvoted 0 times

...

Karrie

5 months ago

Hmm, I'm a bit unsure about this one. The options seem to cover different data protection principles, but I'm not entirely sure which one applies to the scenario described. I might need to re-read the question and the options a few times to make sure I understand it properly.

upvoted 0 times

...

Paris

5 months ago

This one seems pretty straightforward. The question is asking about a data protection principle, and the statement mentions collecting information on how the products are used, the content viewed, and the time and duration of online activities. I think the answer is C, Lawfulness and fairness.

upvoted 0 times

...

Bethanie

5 months ago

I'm leaning towards B and C. Those practices seem to align with the human-centered approach, while the other options are more focused on technology and business priorities.

upvoted 0 times

...

Portia

1 year ago

I see your point, Jerry. It could be both C) Lawfulness and fairness and D) Data use limitation. The company needs to ensure they are following the law while also limiting the use of the data collected.

upvoted 0 times

...

Jerry

1 year ago

But isn't it also about ensuring the data is used fairly and lawfully? I would choose C) Lawfulness and fairness.

upvoted 0 times

...

Colette

1 year ago

I'm feeling a bit mischievous. How about A? System use requirements. You know, just to keep the business on their toes and make them wonder if they're really doing it all right!

upvoted 0 times

Mable

1 year ago

B) Data integrity and confidentiality

upvoted 0 times

...

Robt

1 year ago

No, that's not the correct principle.

upvoted 0 times

...

Michel

1 year ago

A) System use requirements

upvoted 0 times

...

Rodolfo

2 years ago

Ah, the age-old debate of data protection principles. I vote for B. Data integrity and confidentiality - can't have those pesky cusAnnitaers thinking their information is being misused, right?

upvoted 0 times

...

Barney

2 years ago

Hmm, I'm going with D. Data use limitation. The notice states the specific purposes for collecting the data, which aligns with the principle of limiting data use to the stated purposes.

upvoted 0 times

...

Ashley

2 years ago

I agree with Norah. The company is limiting the use of the data collected.

upvoted 0 times

...

Annita

2 years ago

C. Lawfulness and fairness seems like the best fit here. The business is being transparent about the data they collect, which is a key principle of lawful and fair data processing.

upvoted 0 times

Cheryll

1 year ago

C) Lawfulness and fairness

upvoted 0 times

...

Mari

1 year ago

B) Data integrity and confidentiality

upvoted 0 times

...

William

1 year ago

A) System use requirements

upvoted 0 times

...

Gianna

2 years ago

I think the answer is B. Data integrity and confidentiality. Collecting information on how customers use the product seems like a way to ensure data integrity and protect user privacy.

upvoted 0 times