Personal Information CDPSE Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A smart home device manufacturer collects data from its devices, including temperature settings, energy usage, and voice commands. The manufacturer also assigns each device a unique serial number. Which data is considered personal information?

   • ATemperature settings, because they reveal the household's preferences.
   • BDevice serial number, because it is unique to each device.
   • CVoice commands, because they may contain the user's voice and personal requests.
   • DEnergy usage, because it is measured in kilowatt-hours.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A marketing analyst receives a dataset from a partner that contains customer purchase records. Each record includes a customer ID that is a hash of the customer's email address, the product purchased, and the purchase date. The analyst does not have access to the original email addresses. Under privacy principles, how should the analyst treat this dataset?

   • ATreat it as non-personal data because the analyst cannot directly see the email addresses.
   • BTreat it as sensitive personal information because purchase history is always considered sensitive.
   • CTreat it as non-personal data because hashing is a form of anonymization that removes all identifiers.
   • DTreat it as personal information because the hashed email is a pseudonymous identifier that can be linked back to individuals with additional information.
   Reveal Solution Discussion Select an answer first
4. 3application · easy

   A company processes data about its customers, employees, and business partners. Which of the following is NOT a data subject?

   • AA business partner company's legal entity
   • BA job applicant whose resume is reviewed
   • CA customer who has made a purchase
   • DAn employee whose HR records are stored
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which privacy principle requires that personal information be collected only for specified, explicit, and legitimate purposes?

   • ALawfulness
   • BData minimization
   • CStorage limitation
   • DPurpose limitation
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   In the context of personal information, who qualifies as a data subject?

   • AAn identified or identifiable natural person
   • BA legal entity such as a corporation
   • CAn organization that processes personal data
   • DA government agency that collects data
   Reveal Solution Discussion Select an answer first