IAPP Exam CIPP-A Topic 1 Question 79 Discussion

Actual exam question for IAPP's CIPP-A exam

Question #: 79
Topic #: 1

[All CIPP-A Questions]

All of the following are guidelines the PDPC gives about anonymised data EXCEPT?

AAnonymised data is not personal data.

BAny data that has been anonymised bears the same risks for re-identification.

CData that has been anonymised satisfies the 'cease to retain' requirement of Section 25.

DOrganizations should consider the risk of re-identification if it intends to publish or disclose anonymised data.

Show Suggested Answer

Suggested Answer: C

https://www.pdpc.gov.sg/-/media/Files/PDPC/New_DPO_Connect/nov_15/pdf/Anonymisation.pdf

by Sherita at Apr 07, 2025, 07:23 AM

Limited Time Offer

25%

Off

Get Premium CIPP-A Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Willodean

1 months ago

B) 'Bears the same risks'? Sounds like the PDPC is doing a great job of keeping us on our toes. I bet they're just trying to keep us all paranoid.

upvoted 0 times

Lashon

8 days ago

A) Anonymised data is not personal data.

upvoted 0 times

...

Aliza

1 months ago

A) Haha, good one! Anonymized data is totally personal data in disguise. Nice try, PDPC.

upvoted 0 times

...

Elina

1 months ago

D) Well, duh. Of course organizations should consider the risk of re-identification. It's like they're asking us to be irresponsible with people's data.

upvoted 0 times

Cristina

5 days ago

C) Data that has been anonymised satisfies the 'cease to retain' requirement of Section 25.

upvoted 0 times

...

Mari

6 days ago

B) Any data that has been anonymised bears the same risks for re-identification.

upvoted 0 times

...

Cordelia

16 days ago

A) Anonymised data is not personal data.

upvoted 0 times

...

Dacia

2 months ago

C) Wait, really? I thought anonymized data would still need to be deleted eventually. This is news to me!

upvoted 0 times

Yesenia

1 months ago

C) Wait, really? I thought anonymized data would still need to be deleted eventually. This is news to me!

upvoted 0 times

...

Alaine

2 months ago

A) Anonymised data is not personal data.

upvoted 0 times

...

Jeannine

2 months ago

But what about option C? Doesn't anonymised data still need to satisfy the 'cease to retain' requirement?

upvoted 0 times

...

Alease

2 months ago

B) What? Anonymized data can definitely be re-identified. That's just common sense.

upvoted 0 times

Tiffiny

14 days ago

D) Organizations should consider the risk of re-identification if it intends to publish or disclose anonymised data.

upvoted 0 times

...

Rosann

15 days ago

C) Data that has been anonymised satisfies the 'cease to retain' requirement of Section 25.

upvoted 0 times

...

Latonia

19 days ago

B) Any data that has been anonymised bears the same risks for re-identification.

upvoted 0 times

...

Laura

21 days ago

A) Anonymised data is not personal data.

upvoted 0 times

...

Danica

22 days ago

D) Organizations should consider the risk of re-identification if it intends to publish or disclose anonymised data.

upvoted 0 times

...

Olga

1 months ago

C) Data that has been anonymised satisfies the 'cease to retain' requirement of Section 25.

upvoted 0 times

...

Jarod

2 months ago

B) Any data that has been anonymised bears the same risks for re-identification.

upvoted 0 times

...

Kati

2 months ago

A) Anonymised data is not personal data.

upvoted 0 times

...

Silva

2 months ago

I agree with Tonette, because anonymised data can still be re-identified.

upvoted 0 times

...

Tonette

2 months ago

I think the answer is B) Any data that has been anonymised bears the same risks for re-identification.

upvoted 0 times

...