Personal Information CDPSE Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which of the following is an example of a personal identifier?

   • AA server IP address (internal)
   • BA customer loyalty card number
   • CA department budget code
   • DA product serial number
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which of the following is a common type of personal information?

   • AProduct inventory levels
   • BEmail address
   • CCompany revenue figures
   • DBuilding floor plans
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A company is evaluating a new customer relationship management (CRM) system. The system will store customer names, email addresses, and purchase history. The company also wants to integrate a feature that automatically enriches customer profiles with publicly available social media data. Which consideration is most important for privacy compliance?

   • AThe company must obtain consent from the social media platforms, not the customers.
   • BThe enrichment must be disclosed to customers and be compatible with the original purpose of data collection.
   • CThe company must delete all existing customer data before integrating social media data.
   • DThe social media data is publicly available, so no consent is needed.
   Reveal Solution Discussion Select an answer first
5. 9application · easy

   A hospital is implementing a new patient portal. The portal will allow patients to view their lab results, schedule appointments, and message their doctors. The hospital's privacy team must classify the data processed by the portal. Which data type is correctly classified as sensitive personal information?

   • APatient's appointment time
   • BPatient's phone number
   • CPatient's lab results
   • DPatient's messaging history with doctors
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A company's privacy policy states that customer email addresses are collected for account management. The marketing team wants to use the same email addresses to send a weekly newsletter. Which action is most aligned with the principle of purpose limitation?

   • AUse the email addresses for the newsletter because the customers are already in the system.
   • BSend the newsletter but include an opt-out link in the first email.
   • CAnonymize the email addresses before sending the newsletter.
   • DObtain separate consent from customers before using their email addresses for the newsletter.
   Reveal Solution Discussion Select an answer first