IAPP Exam CIPP-C Topic 3 Question 60 Discussion

Actual exam question for IAPP's CIPP-C exam

Question #: 60
Topic #: 3

A private sector daycare's portal for parents stores their children's photos, allergy information and date of birth. A parent has asked about the portal's security requirements and in three months still not has received an answer. What is missing from the daycare's procedures?

AEnsuring transparency.

BResponding to the parent's request within 30 days.

CEnsuring strong encryption and security measures.

DCompleting a real risk of significant harm assessment (RROSH).

Show Suggested Answer

Suggested Answer: C

by Jess at Mar 08, 2025, 08:20 PM

Limited Time Offer

25%

Off

Get Premium CIPP-C Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Bette

6 days ago

Ah, the joys of bureaucracy. I'd put my money on 'Responding to the parent's request within 30 days' - nothing like a good ol' fashioned customer service fail to really spice up your daycare experience.

upvoted 0 times

...

Tonette

14 days ago

Haha, I bet the daycare's IT guy is just sitting at his desk, eating Cheetos and ignoring those emails. 'Real risk of significant harm assessment' sounds about right though, they better get on that!

upvoted 0 times

...

Kimberely

20 days ago

I'd go with 'Ensuring strong encryption and security measures.' Daycare centers handle some pretty sensitive info, they can't be slacking on the cybersecurity front.

upvoted 0 times

...

Teddy

22 days ago

Hmm, I'd say the missing piece here is 'Responding to the parent's request within 30 days.' Transparency is key, and leaving a parent hanging for 3 months is just not cool.

upvoted 0 times

...

Venita

1 months ago

Oof, this one's a tough one. The parent's request for info on the portal's security seems like a pretty reasonable ask. The daycare's lack of response is definitely not a good look.

upvoted 0 times