Data Use Limitation CDPSE Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   An organization wants to ensure that customer data is only used for the purposes stated in its privacy policy. Which organizational control is most appropriate?

   • AUpgrading to the latest operating system.
   • BPurchasing additional data storage capacity.
   • CImplementing a data usage policy that defines acceptable and prohibited uses.
   • DConducting employee satisfaction surveys.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   A company has completed a customer satisfaction survey and no longer needs the responses. What should the company do with the data?

   • AKeep the data indefinitely for potential future analysis.
   • BArchive the data in a secure location without a retention schedule.
   • CDelete the data or anonymize it to remove personal identifiers.
   • DTransfer the data to a third party for marketing purposes.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A financial services company processes customer data for account management. The privacy team suspects that some employees are accessing customer data for personal reasons. Which control is most effective for detecting and preventing this unauthorized use?

   • ADisable USB ports on employee workstations
   • BRequire employees to complete annual privacy training
   • CEncrypt customer data in the database
   • DImplement user activity monitoring and alert on unusual access patterns
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   A data subject objects to the processing of their data for a new marketing purpose. What should the organization do?

   • AStop processing the data for marketing unless there are compelling legitimate grounds that override the data subject's interests.
   • BIgnore the objection because the data subject consented to the original purpose.
   • CContinue processing because the organization has a legitimate interest in marketing.
   • DDelete all data about the data subject immediately.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   What does data minimization in use require?

   • AProcessing data only after obtaining written consent.
   • BProcessing data in the most efficient manner possible.
   • CProcessing all available data to ensure completeness.
   • DProcessing only the data that is adequate, relevant, and limited to what is necessary for the intended purpose.
   Reveal Solution Discussion Select an answer first