CDPSE Practice Test 25 — 15 Questions

Question 1

A privacy engineer is designing a new customer analytics platform that will process personal data from multiple sources. The platform must support the GDPR right to erasure. Which two technical measures should be implemented to ensure erasure requests can be fulfilled effectively? (Choose two.)

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Maintain a centralized index that maps all personal data to the individual across all storage systems.. The right to erasure requires the ability to locate and delete all instances of an individual's personal data. A centralized index enables comprehensive discovery across systems, while cryptographic erasure ensures that data in immutable or backup storage can be effectively rendered inaccessible. Together, these measures provide a robust technical foundation for honoring erasure requests in a distributed environment.

Answer

Rely on manual deletion processes triggered by customer support tickets.

Answer

Store all personal data in a single database to simplify deletion.

Answer

Use a write-once, read-many (WORM) storage model for all personal data.

Question 2

Which TWO options represent common risks when data life cycle management is not implemented?

Accepted Answer

Regulatory non-compliance. Option C (Regulatory non-compliance) is correct because without a defined data life cycle management process, organizations cannot reliably enforce retention, deletion, and protection requirements mandated by regulations such as GDPR, HIPAA, or PCI DSS, leading to violations and penalties. Option D (Increased risk of data breach impact) is correct because unmanaged data tends to accumulate and persist beyond its useful life, expanding the attack surface and the volume of sensitive information exposed in a breach, thereby amplifying its impact. The remaining options do not belong: A (Decreased user account count) is unrelated to data life cycle management, B (Reduced network throughput) is a performance issue rather than a data governance risk, and E (Loss of software license keys) concerns asset/key management, not the life cycle of data itself.

Answer

Decreased user account count

Answer

Reduced network throughput

Answer

Loss of software license keys

Question 3

How can a CDPSE ensure that personal data is only kept for as long as necessary?

Accepted Answer

Implementing automated retention and disposal schedules in the data management system.. Ensuring data is kept only as long as necessary requires enforceable retention and disposal controls, which automated retention and disposal schedules in the data management system provide. Automation applies consistent rules across systems, triggers deletion or anonymization at defined intervals, and produces auditable evidence of compliance. This directly implements storage limitation and data minimization principles.

Answer

Requiring employees to delete their own emails after one year.

Answer

Manually reviewing every file in the database each month.

Answer

Conducting annual security training for all staff.

Question 4

A CDPSE is advising a startup that wants to implement a privacy-by-design approach for a new mobile app. Which principle should be prioritized first to ensure data protection is integrated from the outset?

Accepted Answer

Data minimization. Data minimization should be prioritized first because it is a foundational privacy-by-design principle that reduces the amount of personal data collected and processed. By collecting only necessary data, the startup limits privacy risks and makes other measures like encryption and access controls more effective. Other options are important but secondary to minimizing the data footprint.

Answer

User access controls

Answer

Data encryption

Answer

Consent

Question 5

A privacy analyst is reviewing the data life cycle for a mobile health application that collects user heart rate and location data. The company wants to ensure that data is properly disposed of when users delete their accounts. Which of the following is the MOST critical step to include in the disposal process to prevent residual data from remaining in backups and logs?

Accepted Answer

Implement a documented process that includes purging data from primary storage, backups, and logs, with verification.. Disposal must ensure that personal data is deleted from all repositories where it exists, including backups and logs. A documented process with verification provides assurance that no residual copies remain and supports auditability. Simply revoking access or sending a confirmation does not achieve deletion, and archiving prolongs retention, which conflicts with the user's request and storage limitation.

Answer

Revoke the user's access credentials and disable their account immediately.

Answer

Archive the user's data to a cold storage tier for potential future legal needs.

Answer

Send a confirmation email to the user that their account has been deleted.

Question 6

A CDPSE practitioner at a mid-sized insurance company is designing the privacy governance structure. The Chief Privacy Officer reports to the General Counsel, but privacy decisions frequently require input from IT security, marketing, and product development. The practitioner needs to ensure that privacy requirements are integrated into business processes without creating a bottleneck. Which governance mechanism best achieves this?

Accepted Answer

Establish a cross-functional privacy council with representatives from each business unit that meets regularly to review and approve privacy-impacting initiatives.. A cross-functional privacy council integrates privacy into business units, enabling risk-based decisions and avoiding bottlenecks. It ensures that privacy requirements are considered by all relevant stakeholders, from IT to marketing, and provides a scalable governance mechanism. This approach aligns with CDPSE guidance on establishing accountability and embedding privacy by design, rather than relying on a single person or external party.

Answer

Require the Chief Privacy Officer to personally approve every initiative that touches personal data, regardless of size or risk.

Answer

Delegate all privacy decisions to the IT security team, since they control the technical controls that protect personal data.

Answer

Outsource privacy governance to an external law firm that specializes in data protection regulations.

Question 7

A CDPSE is implementing a privacy program for a U.S. company that processes personal data of EU residents. The company has not appointed a representative in the EU. Under the GDPR, which requirement is most directly violated?

Accepted Answer

The company must designate a representative in the EU unless an exemption applies.. GDPR Article 27 requires non-EU controllers or processors to appoint a representative in the EU when they offer goods or services to, or monitor, EU data subjects, unless an exemption applies. The other choices describe obligations that are either conditional, not mandatory in this context, or not required at all.

Answer

The company must appoint a Data Protection Officer (DPO) because it processes EU personal data.

Answer

The company must obtain prior authorization from the European Data Protection Board (EDPB) before processing.

Answer

The company must implement Binding Corporate Rules (BCRs) for all data transfers.

Question 8

A privacy engineer is implementing a Privacy Enhancing Technology (PET) evaluation framework for a new data collaboration project. The project involves sharing sensitive datasets with partners while preserving analytical utility. Which TWO properties should the framework require to be demonstrated before approving a PET for deployment? (Choose two.)

Accepted Answer

A measured impact on analytical utility compared with the raw dataset.. Approving a PET requires evidence that it actually reduces re-identification risk in the intended sharing model and that the resulting data remains useful for the planned analysis. A quantified re-identification risk assessment and a measured utility impact together capture this privacy-utility trade-off. Licensing, training, and residency are legitimate concerns but are not properties that demonstrate the PET's effectiveness.

Answer

A requirement that all partner personnel complete annual privacy awareness training.

Answer

A commitment to store the shared dataset exclusively in the primary region of the data controller.

Answer

A guarantee that the PET uses open-source components only.

Question 9

A global retailer is deploying a new loyalty program that aggregates purchase history, geolocation, and device identifiers across 14 countries. The privacy office must embed privacy controls at the point of collection rather than retrofitting them after the data warehouse is built. Which data life cycle practice best satisfies this requirement?

Accepted Answer

Implementing privacy-by-design controls during the collection and ingestion stage of the loyalty data pipeline.. Privacy-by-design at the collection and ingestion stage enforces minimization, purpose limitation, and consent before data propagates across systems. Later-stage measures such as post-consolidation tokenization, default storage encryption, or periodic audits are detective or remedial and cannot prevent over-collection. Embedding controls at the earliest life cycle stage is the only approach that satisfies the stated requirement.

Answer

Scheduling quarterly data quality audits to identify and remove unnecessary loyalty attributes.

Answer

Applying tokenization only after the loyalty data has been consolidated into the enterprise data warehouse.

Answer

Relying on the cloud provider's default encryption at rest for all loyalty data stores.

Question 10

A financial services firm stores customer transaction records in a primary operational database and replicates them to a disaster recovery site and an analytics sandbox. A customer exercises erasure rights. The privacy engineer must ensure the erasure propagates to all copies without breaking referential integrity in the operational system. Which approach is most appropriate?

Accepted Answer

Executing a coordinated erasure workflow that tombstones or cryptographically shreds the customer's data across all stores and logs completion.. Erasure obligations extend to every copy of personal data, including disaster recovery replicas and analytics sandboxes. A coordinated workflow that tombstones or crypto-shreds records across all stores, and logs completion, both satisfies erasure and preserves referential integrity. Deleting only from the primary, pseudonymizing in place, or archiving to immutable storage each leaves residual copies or identifiers that defeat the request.

Answer

Overwriting the customer's name field with a pseudonym in the operational database and leaving the transaction history intact.

Answer

Archiving the customer's records to immutable cold storage and removing them from active systems.

Answer

Deleting the customer's rows only from the primary operational database and relying on replication to remove downstream copies.

Question 11

A marketing team wants to use customer email addresses collected for order fulfillment to send promotional offers. The privacy analyst reviewing the request must apply the principle that governs whether this secondary use is permissible. Which data life cycle principle is most directly implicated?

Accepted Answer

Purpose limitation, because the data was collected for fulfillment and is now being repurposed for marketing.. Purpose limitation governs whether personal data collected for one purpose may be reused for another. Repurposing fulfillment email addresses for promotional offers is a secondary use that requires a compatible purpose, consent, or another lawful basis. Storage limitation, accuracy, and integrity and confidentiality address retention, correctness, and security respectively, none of which determines whether the new marketing use is permissible.

Answer

Accuracy, because marketing offers may be sent to outdated or incorrect email addresses.

Answer

Storage limitation, because the email addresses have been retained beyond the fulfillment period.

Answer

Integrity and confidentiality, because marketing systems may expose customer email addresses.

Question 12

A CDPSE is helping a company respond to a data subject access request (DSAR) under the GDPR. Which action is required to comply with Article 15?

Accepted Answer

Provide the data subject with a copy of their personal data and information about the processing.. GDPR Article 15 requires controllers to provide data subjects with access to their personal data and supplementary information about the processing. The first copy must be free, and the response must be provided without undue delay and within one month, extendable by two months for complex requests.

Answer

Delete the personal data immediately upon receiving the request.

Answer

Refuse the request if it comes from an employee rather than a customer.

Answer

Charge a fee for the first copy of the personal data to cover administrative costs.

Question 13

A healthcare analytics company is designing a de-identification process for a research dataset derived from patient records. The privacy team must reduce re-identification risk while preserving analytical utility. Which two techniques should be applied to the dataset? (Choose two.)

Accepted Answer

Applying k-anonymity so each record is indistinguishable from at least k-1 others on quasi-identifiers.. Generalizing quasi-identifiers and applying k-anonymity are complementary de-identification techniques that reduce uniqueness while preserving analytical value. Generalization shrinks the distinguishing power of attributes like age and postal code, and k-anonymity guarantees each record is hidden among at least k-1 others. Suppression destroys utility, encryption does not de-identify, and pseudonymization with intact dates of birth leaves records re-identifiable.

Answer

Suppressing entire columns of clinical measurements to eliminate any possibility of inference.

Answer

Replacing patient names with sequential numeric identifiers while retaining full dates of birth.

Answer

Encrypting the dataset with a symmetric key held by the research team.

Question 14

A privacy engineer is deploying a new analytics platform that ingests event streams containing user identifiers. The business wants to correlate events across sessions but must ensure that if the pseudonymization key is compromised, past data cannot be re-linked to identities. Which design best meets this requirement?

Accepted Answer

Apply a keyed pseudonymization function using a secret key held in an HSM, and delete or rotate the key so historical pseudonyms cannot be reversed.. The requirement is forward secrecy for historical pseudonyms if key material is compromised. A keyed pseudonymization function using a secret key in an HSM, combined with key rotation or destruction, makes stored pseudonyms irreversible once the key is gone. Static salts, per-user keys with retained mappings, and lookup tables all leave a re-linking path, so they cannot satisfy the requirement.

Answer

Use a keyed pseudonymization scheme with per-user keys stored in a hardware security module and rotate the mapping regularly.

Answer

Hash the user identifier with SHA-256 and a static application-wide salt before storing it in the analytics store.

Answer

Store the raw identifier in a separate lookup table and only expose the numeric primary key to the analytics system.

Question 15

A healthcare organization is building a privacy governance framework. The Chief Privacy Officer wants to ensure that privacy roles and responsibilities are clearly defined across the organization. Which artifact is MOST critical for establishing accountability and preventing gaps in privacy oversight?

Accepted Answer

A RACI matrix that maps privacy tasks and decision rights to specific roles and departments.. A RACI matrix is critical because it explicitly assigns roles and decision rights for privacy tasks, ensuring accountability and preventing gaps. It translates governance principles into operational clarity, enabling effective oversight and coordination. While policies, inventories, and training are important, they do not by themselves define who does what, making the RACI matrix the most critical artifact for establishing accountability.

Answer

An annual privacy training program for all employees.

Answer

A data inventory that lists all systems and databases containing personal data.

Answer

A privacy policy that outlines the organization's commitment to protecting personal data.