Which of the following is a common data subject right under modern privacy regulations such as the GDPR?

Right to data portability of all data

A data subject requests that their personal data be transferred to another service provider in a structured, machine-readable format. The privacy team is responsible for fulfilling this request. Which department must be involved to ensure the request is fulfilled correctly?

The marketing department, to ensure the data is not used for future campaigns.

The legal department, to determine if the request is valid and to draft a formal response.

The IT department, to locate, extract, and format the data in a portable format.

The human resources department, to verify the identity of the requestor.

Under the GDPR, when must an organization notify data subjects of a personal data breach?

Within 72 hours of discovering the breach

Only if the breach affects more than 100 individuals

When the breach is likely to result in a high risk to their rights and freedoms

Only if the breach involves financial data

Why is it important to verify the identity of a data subject before fulfilling a request?

To comply with marketing regulations

To prevent unauthorized access to personal data

To determine the data subject's location

To charge a fee for the request

Why is it important to document data subject requests and responses?

To demonstrate compliance with privacy regulations

To charge data subjects for future requests

To share with other organizations

Certified Data Privacy Solutions Engineer

Domain 1Objective 8

Data Subject Rights, Requests, and Notification CDPSE Practice Questions (Page 2)

Part of the Privacy Governance domain, which accounts for 20% of the CDPSE exam.

17questions here

4free pages

7concepts

20%of the exam

Questions 6–10

6foundation · easy
Which of the following is a common data subject right under modern privacy regulations such as the GDPR?
Select an answer first
7application · medium
A data subject requests that their personal data be transferred to another service provider in a structured, machine-readable format. The privacy team is responsible for fulfilling this request. Which department must be involved to ensure the request is fulfilled correctly?
Select an answer first
8foundation · easy
Under the GDPR, when must an organization notify data subjects of a personal data breach?
Select an answer first
9foundation · easy
Why is it important to verify the identity of a data subject before fulfilling a request?
Select an answer first
10foundation · easy
Why is it important to document data subject requests and responses?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CDPSE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISACA. “CDPSE” is a trademark of its owner, used for identification only.