Which of the following observations should be of MOST concern to an IT privacy practitioner during an evaluation of an organization's privacy practices?

• A.Employee records are maintained on a shared drive
• B.Email is sent out without a data classification label
• C.Third-party service desk staff can view limited customer data
• D.Tokens for personally identifiable data are stored as database fields

Comment: *

Name: *

Email: *

Verification: *

A mortgage lender has created an online application that collects borrower information and delivers a mortgage decision automatically based on criteria set by the lender. Which fundamental data subject right does this process infringe upon?

• A.Right to restriction of processing
• B.Right to be informed
• C.Right not to be profiled
• D.Right to object

Comment: *

Name: *

Email: *

Verification: *

During the design of a role-based user access model for a new application, which of the following principles is MOST important to ensure data privacy is protected?

• A.Segregation of duties
• B.Unique user credentials
• C.Two-person rule
• D.Need-to-know basis

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the BEST way for an organization to gain visibility into Its exposure to privacy-related vulnerabilities?

• A.Implement a data loss prevention (DLP) solution.
• B.Review historical privacy incidents in the organization.
• C.Monitor inbound and outbound communications.
• D.Perform an analysis of known threats.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the PRIMARY reason that organizations need to map the data flows of personal data?

• A.To assess privacy risks
• B.To evaluate effectiveness of data controls
• C.To determine data integration gaps
• D.To comply with regulations

Comment: *

Name: *

Email: *

Verification: *