Organizational Culture, Structure, and Responsibilities CDPSE Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   Which of the following best describes a typical privacy governance structure?

   • AA structure that places privacy solely under the IT department with no business involvement.
   • BA hierarchical structure with a privacy committee, executive sponsorship, and defined reporting lines.
   • CA single individual makes all privacy decisions without input from other departments.
   • DAn informal network where privacy decisions are made ad hoc as issues arise.
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A multinational company has a strong engineering culture that prizes speed and innovation. After a data breach, the privacy team realizes that engineers routinely bypass privacy reviews to meet release deadlines. The privacy team wants to embed privacy into the development lifecycle without stifling innovation. Which approach best addresses the cultural barrier?

   • AMandate that all code changes undergo a manual privacy review by the privacy team before deployment.
   • BIncrease the frequency of privacy awareness training and require all engineers to complete it annually.
   • CEstablish a policy that any privacy violation results in a formal warning and potential termination.
   • DIntegrate automated privacy checks into the CI/CD pipeline and provide privacy champions within each engineering team.
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A financial services company is launching a new mobile app that collects customer financial data. The privacy team is working with the product development team to ensure privacy is built into the app. The product team is concerned about delaying the launch. Which collaboration approach best balances privacy and product timelines?

   • AThe privacy team provides a checklist of requirements and expects the product team to implement them without further interaction.
   • BThe privacy team embeds a privacy specialist into the product team to provide guidance during design and development, with regular checkpoints.
   • CThe privacy team reviews the app only after the product is fully developed and ready for launch.
   • DThe privacy team conducts a one-time training session for the product team and then steps back.
   Reveal Solution Discussion Select an answer first
5. 29expert · hard

   A company is implementing a new customer relationship management (CRM) system. The privacy team is concerned about the data being collected, while the sales team wants to maximize data collection for marketing purposes. The company has a culture that values data-driven decision-making. Which approach best balances the need for data with privacy compliance?

   • AHave the privacy team make all decisions about what data to collect, without input from the sales team.
   • BProhibit the sales team from collecting any personal data without prior approval from the privacy team.
   • CAllow the sales team to collect as much data as they want, as long as they obtain consent from customers.
   • DConduct a data protection impact assessment (DPIA) with input from both privacy and sales teams, and implement data minimization principles.
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   Why is cross-functional collaboration between privacy and IT teams important for privacy management?

   • AIT teams implement technical controls that support privacy requirements, such as access controls and encryption.
   • BIT teams make all decisions about data collection purposes.
   • CIT teams are the only ones who understand data flows.
   • DIT teams are solely responsible for legal compliance.
   Reveal Solution Discussion Select an answer first