Organizational Culture, Structure, and Responsibilities CDPSE Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   Which scenario best illustrates effective cross-functional collaboration between privacy and HR?

   • AHR independently decides to use employee data for a new wellness program without consulting privacy.
   • BPrivacy and HR jointly review the employee privacy notice and data handling procedures.
   • CHR and privacy only communicate during annual audits.
   • DPrivacy delegates all employee data handling to HR without oversight.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   Which of the following is a key benefit of regular privacy training for employees?

   • AIt eliminates the need for technical security controls.
   • BIt guarantees that no data breach will ever occur.
   • CIt reduces the likelihood of human error leading to privacy incidents.
   • DIt transfers all privacy responsibility to employees.
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A retail company has a high turnover rate among customer service representatives. They handle customer personal data daily. The privacy team wants to ensure that new hires understand their privacy responsibilities. Which approach is most effective for this environment?

   • AInclude privacy training in the onboarding process and provide refresher courses annually.
   • BConduct a one-time privacy training for all employees at the end of the year.
   • CRely on the employee handbook to communicate privacy policies.
   • DAssign a privacy mentor to each new hire who can answer questions as they arise.
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A healthcare organization is designing its privacy governance structure. They want to ensure that privacy decisions are made with input from legal, IT, and clinical departments, and that there is a clear escalation path for complex issues. Which structure best meets this need?

   • AA decentralized model where each department manages its own privacy independently with no formal coordination.
   • BA single privacy officer who makes all decisions independently and consults with departments only when necessary.
   • CA privacy committee with representatives from legal, IT, and clinical departments, chaired by the DPO, with authority to make decisions on routine matters and escalate complex issues to the board.
   • DAn IT-led privacy committee that focuses on technical controls and defers policy decisions to the legal department.
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   What does 'accountability' mean in the context of privacy governance?

   • AAccountability means transferring all privacy risks to third-party vendors.
   • BThe organization must demonstrate how it complies with privacy principles and can show evidence of that compliance.
   • COnly the DPO is responsible for all privacy compliance.
   • DPrivacy compliance is optional if the organization has a privacy policy.
   Reveal Solution Discussion Select an answer first