IAPP Exam CIPP-E Topic 7 Question 66 Discussion

Actual exam question for IAPP's CIPP-E exam

Question #: 66
Topic #: 7

SCENARIO

Please use the following to answer the next question:

Sandy recently joined Market4U, an advertising technology company founded in 2016, as their VP of Privacy and Data Governance. Through her first initiative in conducting a data inventory, Sandy learned that Market4U maintains a list of 19 million global contacts that were collected throughout the course of Market4U's existence. Knowing the risk of having such a large amount of data, Sandy wanted to purge all contacts that were entered into Market4U's systems prior to May 2018, unless such contacts had a more recent interaction with Market4U content. However, Dan, the VP of Sales, informed Sandy that all of the contacts provide useful information regarding successful marketing campaigns and trends in industry verticals for Market4U's clients.

Dan also informed Sandy that he had wanted to focus on gaining more customers within the sports and entertainment industry. To assist with this behavior, Market4U's marketing team decided to add several new fields to Market4U's website forms, including forms for downloading white papers, creating accounts to participate in Market4U's forum, and attending events. Such fields include birth date and salary.

What is the best way that Sandy can gain the insights that Dan seeks while still minimizing risks for Market4U?

AConduct analysis only on anonymized personal data.

BConduct analysis only on pseudonymized personal data.

CDelete all data collected prior to May 2018 after conducting the trend analysis.

DProcure a third party to conduct the analysis and delete the data from Market4U's systems.

Show Suggested Answer

Suggested Answer: B

by Rolande at Mar 02, 2023, 01:38 AM

Limited Time Offer

25%

Off

Get Premium CIPP-E Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Val

1 months ago

Wait, they're collecting birth dates and salaries? I guess the sports and entertainment industry really is all about the money these days. Maybe they should just start a dating app instead - it would be a more honest use of all that personal data.

upvoted 0 times

...

Frederica

1 months ago

I'm pretty sure Dan just wants to secretly sell everyone's birth dates and salaries to the highest bidder. Maybe we should just tell him to start his own sports and entertainment gossip site instead.

upvoted 0 times

Sol

2 days ago

I'm pretty sure Dan just wants to secretly sell everyone's birth dates and salaries to the highest bidder. Maybe we should just tell him to start his own sports and entertainment gossip site instead.

upvoted 0 times

...

Frank

4 days ago

B) Conduct analysis only on pseudonymized personal data.

upvoted 0 times

...

Leonard

9 days ago

A) Conduct analysis only on anonymized personal data.

upvoted 0 times

...

Christiane

1 months ago

Option D is an interesting idea, but I'm not sure I'd want to hand over all of that sensitive data to a third party. Pseudonymization seems like the most elegant solution here - it maintains the utility of the data while minimizing the risks.

upvoted 0 times

Carmen

7 days ago

B) Conduct analysis only on pseudonymized personal data.

upvoted 0 times

...

Timothy

22 days ago

A) Conduct analysis only on anonymized personal data.

upvoted 0 times

...

Iesha

2 months ago

I'm not a big fan of option C. Deleting all the data collected prior to May 2018 could lead to a loss of valuable insights and historical trends. It's better to find a way to retain and analyze the data while still protecting individual privacy.

upvoted 0 times

Harley

5 days ago

D) Procure a third party to conduct the analysis and delete the data from Market4U's systems.

upvoted 0 times

...

Emerson

7 days ago

I agree, option C seems too drastic. We need to find a balance between insights and privacy.

upvoted 0 times

...

Beckie

8 days ago

B) Conduct analysis only on pseudonymized personal data.

upvoted 0 times

...

Mindy

20 days ago

A) Conduct analysis only on anonymized personal data.

upvoted 0 times

...

Broderick

2 months ago

Option A sounds like a good idea, but I'm not sure if it would provide the level of detail that Dan is looking for. Pseudonymization seems like a reasonable compromise between privacy and business needs.

upvoted 0 times

Lynna

8 days ago

D) Procure a third party to conduct the analysis and delete the data from Market4U's systems.

upvoted 0 times

...

Gracia

21 days ago

C) Delete all data collected prior to May 2018 after conducting the trend analysis.

upvoted 0 times

...

Devora

1 months ago

B) Conduct analysis only on pseudonymized personal data.

upvoted 0 times

...

Amie

1 months ago

A) Conduct analysis only on anonymized personal data.

upvoted 0 times

...

Desmond

2 months ago

D) Procure a third party to conduct the analysis and delete the data from Market4U's systems.

upvoted 0 times

...

Viva

2 months ago

B) Conducting analysis on pseudonymized data would protect privacy while still providing valuable insights.

upvoted 0 times

...

Keshia

2 months ago

B) Conduct analysis only on pseudonymized personal data.

upvoted 0 times

...

Kiera

2 months ago

A) Conduct analysis only on anonymized personal data.

upvoted 0 times

...

Cordie

2 months ago

But what about the useful information from the contacts? Maybe Sandy can consider option D and procure a third party for analysis.

upvoted 0 times

...

Wava

2 months ago

I think option B is the best choice here. Conducting analysis on pseudonymized personal data would allow Market4U to gain the insights they need while still minimizing the risks associated with holding onto such a large amount of personal data.

upvoted 0 times