Privacy Documentation (Policies, Guidelines) CDPSE Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What is the purpose of aligning privacy documentation with industry frameworks such as ISO/IEC 27701?

   • ATo make the documentation more complex and detailed
   • BTo ensure the documentation is written in a specific language
   • CTo replace the need for legal review of the documentation
   • DTo leverage established best practices and facilitate compliance with multiple regulations
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A privacy officer is presenting the value of privacy documentation to the board of directors. The board asks how these documents support the organization's governance and accountability. What is the most accurate response?

   • APrivacy documentation is only necessary to satisfy legal requirements and has no other value
   • BPrivacy documentation is a one-time effort that does not need to be maintained
   • CPrivacy documentation is primarily a marketing tool to build customer trust
   • DPrivacy documentation establishes clear rules and responsibilities, providing evidence of compliance and a basis for audits and enforcement
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which method is most effective for communicating privacy policies to employees?

   • AIncluding the policy only in the employee handbook
   • BSending a single email with the policy attached
   • CTailored training sessions that explain the policy in the context of employees' roles
   • DPosting the policy on a bulletin board without further explanation
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   What is the primary goal of communicating privacy documentation to stakeholders?

   • ATo demonstrate the complexity of the privacy program
   • BTo ensure stakeholders understand and can adhere to the privacy requirements
   • CTo satisfy a legal requirement to publish all documents
   • DTo create a record of stakeholder meetings
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   What is the key difference between a privacy policy and a privacy guideline?

   • AA policy is short, while a guideline is long
   • BA policy is mandatory, while a guideline is recommended
   • CA policy is for external use, while a guideline is for internal use
   • DA policy is created by legal, while a guideline is created by IT
   Reveal Solution Discussion Select an answer first