IAPP Exam CIPP-A Topic 1 Question 79 Discussion

Actual exam question for IAPP's CIPP-A exam

Question #: 79
Topic #: 1

[All CIPP-A Questions]

All of the following are guidelines the PDPC gives about anonymised data EXCEPT?

AAnonymised data is not personal data.

BAny data that has been anonymised bears the same risks for re-identification.

CData that has been anonymised satisfies the 'cease to retain' requirement of Section 25.

DOrganizations should consider the risk of re-identification if it intends to publish or disclose anonymised data.

Show Suggested Answer

Suggested Answer: C

by Sherita at Apr 07, 2025, 07:23 AM

Limited Time Offer

25%

Off

Contribute your Thoughts:

Submit Cancel

12 days ago

C) Wait, really? I thought anonymized data would still need to be deleted eventually. This is news to me!

upvoted 0 times

...

14 days ago

But what about option C? Doesn't anonymised data still need to satisfy the 'cease to retain' requirement?

upvoted 0 times

...

18 days ago

B) What? Anonymized data can definitely be re-identified. That's just common sense.

upvoted 0 times

3 days ago

A) Anonymised data is not personal data.

upvoted 0 times

...

19 days ago

I agree with Tonette, because anonymised data can still be re-identified.

upvoted 0 times

...

21 days ago

I think the answer is B) Any data that has been anonymised bears the same risks for re-identification.

upvoted 0 times

...