CIPP/E Exam Questions and Detailed Answers

Outliers work on their website to company x, employee of Company X steals the data -delete it - tells boss. Q: What is company x legally obliged to do? A: NotifyOutliers Outliers work on their website to company x, employee of Company X steals the data -delete it - tells boss. Q: What does Outliers then need to do? A: Nothingas data was deleted Outliers work on their website to company x, employee of Company X steals the data -delete it - tells boss. Q: Follows on with Cookies question? A: Consentto opt-in to cookies Privacy notice for new Health App collecting sensitive data. Q: What is the problem with the draft? A: Them form is asking for health information from the outset, which is not legal Privacy notice for new Health App collecting sensitive data Q: Potential problem with collecting children data? A: Need to demonstrate steps to gain parental consent Anna is lawyer foruniversity tasked with Student Records. Frank is a professor. Four types of data:Student Data - personal infoEmployee Data - personal infoAlumni Data - personal infoDepartment of Education Data:demographic data - no personal identifiers (used to see how first year students progress, etc.)Frank wants to build a database to process data and see how first year students in his class progressed. Frank builds algorithm to process data without identifiers. All university systems are encrypted. Takes data to his home laptop which is not encrypted. Loses laptop Q: Which types of data does Anna NOT have to include in her record of processing activities? Department of Education Records Q: What should the Anna/DPO checkto confirm he can process those data? More information about the algorithm he has developed Q: He losses the data, what should happen next? Should they inform the students? Yes because potential high risk since data was not encrypted Case study on guy gets photo taken at a gym in Germany -consents to them using it for marketing -Gym HQ in France