Organizational Culture, Structure, and Responsibilities CDPSE Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A technology startup has a culture that values autonomy and minimal bureaucracy. The privacy team is struggling to get employees to follow privacy procedures, which they see as excessive. The startup wants to improve privacy compliance without creating a heavy-handed environment. Which approach is most aligned with the startup's culture?

   • ACreate a separate privacy team that handles all privacy-related tasks for other departments.
   • BDevelop a simple, user-friendly privacy guide and integrate privacy considerations into existing workflows.
   • CImplement a strict enforcement policy with penalties for non-compliance.
   • DRequire all employees to sign a privacy acknowledgment form annually.
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A company is restructuring its privacy governance. They currently have a DPO who reports to the Chief Legal Officer. The company is considering moving the DPO to report directly to the CEO to elevate the privacy function. What is a potential advantage of this change?

   • AIt reduces the DPO's workload because the CEO can make privacy decisions.
   • BIt eliminates the need for a privacy committee.
   • CIt gives the DPO more authority and visibility, which can help drive privacy initiatives across the organization.
   • DIt ensures that the DPO is independent from legal, which is required by all privacy regulations.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   An organization is defining accountability for privacy tasks. They want to ensure that each task has a clear owner and that there is a way to measure performance. Which approach best supports this?

   • ACreate a privacy policy that outlines general expectations for all employees.
   • BAppoint a single privacy officer to handle all privacy tasks.
   • CConduct annual privacy audits to identify gaps in compliance.
   • DDefine privacy roles and responsibilities in job descriptions and include privacy performance metrics in employee evaluations.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Which of the following is the most direct way that a positive privacy culture influences the effectiveness of a privacy governance program?

   • AIt increases the likelihood that employees will follow privacy practices and report potential issues.
   • BIt shifts all privacy responsibility to the legal department, simplifying governance.
   • CIt ensures that all employees automatically comply with privacy regulations without training.
   • DIt eliminates the need for formal privacy policies and procedures.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Which role is primarily responsible for the day-to-day management and quality of personal data within a specific business area?

   • AData steward
   • BExternal auditor
   • CChief information security officer (CISO)
   • DData protection officer (DPO)
   Reveal Solution Discussion Select an answer first