A privacy analyst is reviewing a new marketing campaign that will use customer purchase history originally collected for order fulfillment. According to the data use limitation principle, what is the primary concern?

Whether the purchase history is accurate and up-to-date before it is used for marketing.

Whether the marketing campaign will generate sufficient revenue to justify the data use.

Whether the purchase history is stored in an encrypted format to protect it during the campaign.

Whether using purchase history for marketing is compatible with the original purpose of order fulfillment.

Which activity is an example of auditing data use?

Reviewing access logs to identify who accessed customer data and when.

Encrypting data before storing it in the database.

Training employees on data privacy policies.

Deleting data that is no longer needed.

A law firm stores client documents in a shared network drive. All employees have read/write access to all client folders. The privacy team wants to enforce data use limitations so that only the legal team handling a specific case can access that case's documents. What is the most appropriate control to implement?

Configure role-based access control (RBAC) on the shared drive to restrict access to case folders

Require all employees to sign a confidentiality agreement

Monitor access logs and review them monthly

Encrypt the shared drive with a single encryption key

What is the primary purpose of monitoring and auditing data use?

To increase the volume of data collected.

To detect and prevent unauthorized or incompatible uses of data.

To improve the speed of data processing systems.

A company collected customer location data to provide navigation services. It now wants to use the same data to analyze traffic patterns for city planning. Which factor would most likely indicate that this new use is compatible?

The company will use the same data storage system for the analysis.

The analysis will be published in a public report.

The city planning analysis is performed by a government agency.

The location data is aggregated and anonymized before the analysis.

Certified Data Privacy Solutions Engineer

Domain 3Objective 3

Data Use Limitation CDPSE Practice Questions (Page 3)

Part of the Data Life Cycle Management domain, which accounts for 23% of the CDPSE exam.

21questions here

5free pages

10concepts

23%of the exam

Questions 11–15

11foundation · easy
A privacy analyst is reviewing a new marketing campaign that will use customer purchase history originally collected for order fulfillment. According to the data use limitation principle, what is the primary concern?
Select an answer first
12foundation · easy
Which activity is an example of auditing data use?
Select an answer first
13application · medium
A law firm stores client documents in a shared network drive. All employees have read/write access to all client folders. The privacy team wants to enforce data use limitations so that only the legal team handling a specific case can access that case's documents. What is the most appropriate control to implement?
Select an answer first
14foundation · easy
What is the primary purpose of monitoring and auditing data use?
Select an answer first
15foundation · easy
A company collected customer location data to provide navigation services. It now wants to use the same data to analyze traffic patterns for city planning. Which factor would most likely indicate that this new use is compatible?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CDPSE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISACA. “CDPSE” is a trademark of its owner, used for identification only.