IAPP Exam CIPP/C Topic 2 Question 42 Discussion

Actual exam question for IAPP's CIPP/C exam

Question #: 42
Topic #: 2

Which of the following incidents will require reporting to OPC?

AA sales report with aggregated information that was sent to the wrong person internally.

BA file with client ID, sales amount and sales date that was sent to the wrong processors who cannot identify the clients.

CAn organization's point-of-sale system that was subject to an attempted hack that was blocked by the organization's firewall.

DAs part of a freedom of information request, a nursing home that released an e-mail with everybody's e-mail address in the 'to' section unredacted.

Show Suggested Answer

Suggested Answer: A

by Denae at Jun 19, 2024, 05:53 AM

Limited Time Offer

25%

Off

Get Premium CIPP/C Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Sharan

12 months ago

Haha, the attempted hack that got blocked? That's just a day in the life for most organizations these days. I doubt the OPC would care about that one.

upvoted 0 times

...

Yuki

12 months ago

Hmm, I'm not so sure. Sending a file with client information to the wrong processors seems pretty bad too. That could lead to a data breach if they can't identify the clients.

upvoted 0 times

Almeta

10 months ago

C) An organization's point-of-sale system that was subject to an attempted hack that was blocked by the organization's firewall.

upvoted 0 times

...

Salena

11 months ago

B) That's true, sending client information to the wrong processors is a serious issue.

upvoted 0 times

...

Ellen

11 months ago

B) A file with client ID, sales amount and sales date that was sent to the wrong processors who cannot identify the clients.

upvoted 0 times

...

Adell

11 months ago

A) A sales report with aggregated information that was sent to the wrong person internally.

upvoted 0 times

...

Willow

12 months ago

That's true, both B and D could potentially harm individuals if misused.

upvoted 0 times

...

Andra

12 months ago

But what about option D? Releasing everyone's email address seems like a breach too.

upvoted 0 times

...

Fatima

12 months ago

I agree, D is the only one that involves a clear privacy violation. The other incidents don't seem to have the same level of risk or impact.

upvoted 0 times

Agustin

11 months ago

B) A file with client ID, sales amount and sales date that was sent to the wrong processors who cannot identify the clients.

upvoted 0 times

...

Gabriele

11 months ago

A) A sales report with aggregated information that was sent to the wrong person internally.

upvoted 0 times

...

Avery

12 months ago

I agree with Willow, client ID and sales information is sensitive.

upvoted 0 times

...

Berry

1 years ago

Option D is clearly the correct answer here. Releasing personal information like email addresses without consent is a serious breach that needs to be reported to the OPC.

upvoted 0 times