Check Data Privacy, Compliance, and Access PMI-CPMAI Practice Questions (Page 6)

Questions 26–29

1. 26foundation · easy

   A project handles personal data of EU residents. What must the team ensure to comply with data protection regulations?

   • AThe data is only used for internal purposes
   • BThe data handling follows applicable regulations such as GDPR
   • CThe data is stored in a public cloud
   • DThe data is anonymized before any processing
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A European e-commerce company is launching a new feature that uses customer purchase history to generate personalized product recommendations. The feature will process personal data of EU residents. Before development begins, the data protection officer (DPO) requires an assessment of the data processing's impact on individuals' privacy. What should the project team do?

   • AConduct a privacy impact assessment (PIA) to evaluate the necessity, proportionality, and risks of the processing, and document mitigation measures.
   • BProceed with development and conduct the PIA after the feature is launched to avoid delaying the release.
   • CAsk the DPO to sign off on the feature without a PIA because the company already has a privacy policy.
   • DAnonymize the purchase history data so the PIA is no longer required.
   Reveal Solution Discussion Select an answer first
4. 28expert · hard

   A city government wants to use smart meter data to optimize energy distribution. The data includes household-level consumption patterns, which are personal data. The city's privacy officer requires a privacy impact assessment (PIA). The data engineering team is also planning to implement access controls. What should the team do first?

   • AAnonymize the data before the PIA to avoid the need for an assessment.
   • BSkip the PIA because the city already has a data protection policy.
   • CConduct the PIA to identify risks and required controls before implementing access controls.
   • DImplement access controls first to protect the data, then conduct the PIA.
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   A data scientist wants to use a public dataset for a commercial product. What should be checked first to determine if this is allowed?

   • AThe number of records in the dataset
   • BThe dataset's file format and size
   • CThe dataset's license terms and conditions
   • DThe data's last update date
   Reveal Solution Discussion Select an answer first