IAPP Exam CIPP-C Topic 3 Question 60 Discussion

Actual exam question for IAPP's CIPP-C exam

Question #: 60
Topic #: 3

A private sector daycare's portal for parents stores their children's photos, allergy information and date of birth. A parent has asked about the portal's security requirements and in three months still not has received an answer. What is missing from the daycare's procedures?

AEnsuring transparency.

BResponding to the parent's request within 30 days.

CEnsuring strong encryption and security measures.

DCompleting a real risk of significant harm assessment (RROSH).

Show Suggested Answer

Suggested Answer: C

by Jess at Mar 08, 2025, 08:20 PM

Limited Time Offer

25%

Off

Get Premium CIPP-C Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Kimberely

4 days ago

I'd go with 'Ensuring strong encryption and security measures.' Daycare centers handle some pretty sensitive info, they can't be slacking on the cybersecurity front.

upvoted 0 times

...

Teddy

6 days ago

Hmm, I'd say the missing piece here is 'Responding to the parent's request within 30 days.' Transparency is key, and leaving a parent hanging for 3 months is just not cool.

upvoted 0 times

...

Venita

27 days ago

Oof, this one's a tough one. The parent's request for info on the portal's security seems like a pretty reasonable ask. The daycare's lack of response is definitely not a good look.

upvoted 0 times