CDPSE Multiple Select — 60 Questions

Question 1

Which THREE types of data are typically targeted for aggressive minimization?

Accepted Answer

Redundant, Obsolete, and Trivial (ROT) data. Option B is correct because ROT data (Redundant, Obsolete, and Trivial) has no ongoing business or legal value, so it is a prime candidate for aggressive minimization to reduce storage costs and breach exposure. Option D is correct because financial and payment information (e.g., cardholder data under PCI DSS) is highly sensitive and subject to strict retention limits, making it a frequent target for minimization. Option E is correct because PII is protected by privacy regulations such as GDPR and CCPA, which mandate data minimization and storage limitation, so organizations aggressively purge unneeded PII. Option A is not typically minimized aggressively because system logs for performance analysis are often retained for troubleshooting, capacity planning, and security monitoring. Option C is not a minimization target because publicly available documentation contains no sensitive or regulated data and poses little risk if retained.

Answer

System logs for performance analysis

Answer

Publicly available documentation

Question 2

Which THREE attributes are typically included in a 'Privacy Metadata' schema to support automated data governance?

Accepted Answer

Data owner identifier. Option A (Data owner identifier) is correct because privacy metadata schemas must record the accountable party (person or role) responsible for the data, enabling automated governance workflows such as access approvals, policy enforcement, and incident routing. Option C (Data retention policy) is correct because retention rules define how long data may be kept and when it must be deleted or archived, which automated governance tools use to trigger lifecycle actions and enforce compliance (e.g., GDPR storage limitation). Option E (Data classification label) is correct because classification (e.g., Public, Internal, Confidential, PII) drives automated handling rules such as encryption, masking, access control, and DLP policies. Option B (Database server IP) is not a privacy metadata attribute; it is infrastructure/asset metadata used for network or inventory purposes, not for describing privacy characteristics of the data. Option D (System uptime monitor) is unrelated operational telemetry about availability, not privacy governance metadata.

Answer

Database server IP

Answer

System uptime monitor

Question 3

A financial institution is building a data life cycle management program. The privacy team must ensure that personal data is properly governed from creation to disposal. Which two practices are essential for maintaining data quality and compliance throughout the life cycle? (Choose two.)

Accepted Answer

Implementing automated data classification at ingestion.. Automated classification at ingestion and regular data quality audits are foundational for governing data throughout its life cycle. Classification ensures policies are applied consistently from the start, while audits verify ongoing accuracy and compliance. Encryption, centralization, and uniform retention are either too narrow or potentially harmful, and do not address the breadth of life cycle governance.

Answer

Storing all data in a single centralized repository.

Answer

Applying the same retention period to all data types.

Answer

Encrypting all data at rest and in transit.

Question 4

When designing a privacy-preserving data pipeline, which TWO strategies help achieve 'Data Minimization'?

Accepted Answer

Truncating or hashing identifiers before ingestion. Data minimization means collecting and keeping only the personal data that is strictly necessary for the stated purpose, so option B is correct: truncating or hashing identifiers before ingestion removes or de-identifies direct identifiers so the pipeline never stores more identifying detail than needed. Option E is also correct because aggregating data points to a higher level of abstraction reduces granularity and prevents individual-level records from being retained, which directly limits the amount of personal data processed. Option A is wrong because disabling all audit logging does not minimize data; it removes accountability and security controls, and audit logs are typically required for compliance. Option C is wrong because increasing backup retention keeps personal data longer, which contradicts minimization and storage-limitation principles. Option D is wrong because storing all raw data in a data lake for future use is the opposite of minimization, as it retains maximal data beyond current necessity.

Answer

Disabling all audit logging

Answer

Increasing the retention period for backups

Answer

Storing all raw data in a data lake for future use

Question 5

A CDPSE is assessing the organization's readiness for a data subject access request (DSAR) under the GDPR. The organization processes data in multiple systems, including a CRM, email marketing platform, and HR database. Which TWO steps are essential to ensure timely and complete responses to DSARs? (Choose two.)

Accepted Answer

Establish a process to verify the identity of the requester before releasing data.. To handle DSARs effectively, organizations must track requests centrally to meet deadlines and verify requester identity to prevent unauthorized disclosures. Deleting data, charging fees, or requiring database specifics are non-compliant practices. These two steps are foundational for a defensible DSAR process under GDPR.

Answer

Automatically delete all data upon receiving a DSAR to simplify the process.

Answer

Require the requester to specify the exact database where their data is stored.

Answer

Charge a fee for each DSAR to cover administrative costs.

Question 6

A CDPSE is reviewing a healthcare organization's data retention practices. The organization stores patient medical records, billing information, and appointment scheduling data in a cloud-based electronic health record (EHR) system. The CDPSE must ensure compliance with privacy regulations that require data to be kept only as long as necessary. Which TWO of the following actions are the MOST effective to establish and maintain a defensible data retention schedule? (Choose two.)

Accepted Answer

Implement automated deletion or anonymization processes that trigger at the end of each defined retention period.. Establishing a defensible retention schedule begins with knowing what data exists and what rules apply, which is achieved through a data inventory and classification. Then, the schedule must be enforced through automation to ensure timely deletion or anonymization. These two actions together provide the necessary foundation and operational mechanism. The other options either violate storage limitation principles or fail to ensure consistent compliance across the organization.

Answer

Store all patient data indefinitely to ensure it is available for future medical research or legal claims.

Answer

Document the retention schedule in a policy but allow individual departments to deviate as needed without central oversight.

Answer

Rely on the cloud provider's default retention settings for the EHR system to manage data lifecycle.

Question 7

A privacy program manager is designing a data retention schedule for a new SaaS application that processes employee HR data. The schedule must comply with GDPR and other privacy regulations. Which TWO of the following are essential considerations when determining retention periods for different data categories? (Choose two.)

Accepted Answer

The legal and regulatory requirements that mandate minimum or maximum retention periods for specific data types, such as tax records or health information.. Retention periods must be based on legal requirements and the purpose of processing. Legal mandates set minimum or maximum periods, while data minimization requires that data not be kept longer than necessary for the specified purpose. Together, these ensure compliance and respect for privacy principles. Technical capabilities and cost are secondary implementation factors.

Answer

The technical capabilities of the SaaS application to automatically enforce retention and deletion, such as built-in retention labels or policies.

Answer

The storage cost associated with retaining data in the SaaS application's cloud infrastructure, to optimize the IT budget.

Answer

The preferences of the employees whose data is being processed, as expressed through consent forms or surveys.

Question 8

Which THREE components should be included in a data inventory to ensure it is actionable for DSR (Data Subject Request) fulfillment?

Accepted Answer

Storage location. A is correct because knowing the storage location (the specific system, database, application, or repository where personal data resides) is essential for locating and retrieving or deleting data when fulfilling a DSR such as access or erasure. B is correct because identifying the data owner/steward provides the accountable contact who can validate the request, authorize actions, and coordinate retrieval or deletion across systems. E is correct because recording the data category/type (for example identifiers, financial data, health data, or special categories under GDPR) lets teams determine what is in scope, apply the right exemptions, and respond accurately to access, portability, or erasure requests. C is not relevant because server uptime percentage is an availability/operations metric that does not help locate or classify personal data for DSR fulfillment. D is also not relevant because network bandwidth usage is a performance/capacity metric unrelated to identifying, classifying, or acting on personal data in response to a DSR.

Answer

Server uptime percentage

Answer

Network bandwidth usage

Question 9

A privacy engineer is designing a data processing pipeline that ingests customer records from multiple source systems into a centralized analytics environment. The design must enforce data minimization and purpose limitation. Which TWO engineering controls should be implemented? (Choose two.)

Accepted Answer

Tag each record with its source purpose and enforce purpose-based access policies.. Data minimization and purpose limitation in a centralized pipeline require both a restrictive schema that admits only approved fields and purpose tags that drive access decisions. Together they prevent unapproved attributes from entering the environment and stop records from being reused for incompatible purposes. Broad raw access and indefinite retention work against both principles and should be avoided in the design.

Answer

Retain all source records indefinitely to preserve historical accuracy.

Answer

Grant all analytics engineers read access to the raw ingestion zone.

Answer

Store all ingested records in a single unpartitioned table for maximum flexibility.

Question 10

A privacy engineer is implementing a consent management platform for a mobile application. The platform must capture, store, and enforce user consent preferences across multiple microservices. Which two actions should the engineer take to ensure consent is technically enforceable and auditable? (Choose two.)

Accepted Answer

Store consent records with a timestamp, version of the privacy notice, and the specific purposes consented to.. To make consent technically enforceable and auditable, the engineer must both record granular consent details (timestamp, notice version, purposes) and enforce those preferences at the point of processing within each microservice. Recording alone does not prevent processing, and enforcement without a reliable record lacks proof. Together, they create a robust consent management system that supports compliance and user rights.

Answer

Encrypt consent records using a symmetric key stored in the application code to prevent tampering.

Answer

Rely on the mobile operating system's permission prompts as the sole mechanism for capturing consent for all data processing purposes.

Answer

Allow users to change their consent preferences only through a customer support ticket to maintain a controlled audit trail.

Question 11

A multinational retailer is implementing a data life cycle management program. The privacy team must ensure that personal data collected in the EU is not retained longer than necessary and that disposal is verifiable. Which two controls are essential to meet these objectives? (Choose two.)

Accepted Answer

Define and enforce retention periods for each data category based on business, legal, and regulatory requirements.. To ensure data is not retained longer than necessary and that disposal is verifiable, the program must define and enforce retention periods and implement automated deletion with audit logs. Retention periods set the 'when' for disposal, while automated workflows with logging provide the 'how' and the evidence. Other controls like encryption or training are valuable but do not directly achieve these specific objectives.

Answer

Encrypt all personal data at rest using AES-256.

Answer

Conduct annual privacy training for all employees.

Answer

Store all personal data in a single centralized database to simplify management.

Question 12

A privacy engineer is designing a data retention and deletion capability for a cloud-native application that stores personal data in an object storage bucket with versioning enabled and in a relational database with point-in-time recovery. The engineer must ensure that deletion requests are fully honored across both stores. Which TWO actions should the engineer take? (Choose two.)

Accepted Answer

Implement a deletion workflow that removes the data subject's rows and then expires the relevant database backups and snapshots according to a defined retention schedule.. Deletion in cloud-native stores must account for residual copies. Expiring non-current object versions with lifecycle rules removes the older copies that versioning retains, and a deletion workflow that also expires backups and snapshots removes the relational store's residual copies. Disabling recovery, enabling object lock, or relying on vacuum does not achieve complete deletion.

Answer

Disable point-in-time recovery on the relational database so that deleted rows cannot be restored.

Answer

Rely on the database's automatic vacuum process to remove deleted rows from all storage layers.

Answer

Enable object lock in governance mode on the bucket to prevent any deletion of personal data.

Question 13

A privacy analyst is reviewing the data life cycle management process for a healthcare organization. The organization wants to ensure that data is properly managed from creation to disposal. Which TWO of the following are key activities in the data disposal phase? (Choose two.)

Accepted Answer

Verifying that data has been irreversibly destroyed across all storage locations and backups.. The data disposal phase involves securely destroying data when it is no longer needed and ensuring that the destruction is complete and documented. Verifying irreversible destruction across all locations and maintaining documentation and audit trails are key activities. Other options pertain to earlier phases such as collection, storage, or use, and do not directly contribute to secure disposal.

Answer

Implementing access controls to restrict who can view the data during its active use.

Answer

Collecting consent from data subjects for processing their personal data.

Answer

Encrypting data at rest to protect it from unauthorized access.

Question 14

A CDPSE is advising a financial services firm that wants to outsource its customer call recording and analytics to a cloud provider. The recordings contain personal data and some payment card information. The firm must ensure the outsourcing arrangement meets privacy and compliance expectations. Which TWO actions should the CDPSE recommend as part of the vendor risk management process? (Choose two.)

Accepted Answer

Require the vendor to provide evidence of independent third-party certifications and audit reports relevant to privacy and security.. Effective vendor risk management for sensitive data includes independent assurance through certifications and audits, and enforceable contractual clauses that define data protection obligations, breach notification and audit rights. Together, these actions provide the firm with evidence of the vendor's controls and the legal means to enforce compliance, while preserving the firm's accountability.

Answer

Allow the vendor to use the data for its own product improvement purposes to reduce costs.

Answer

Rely on the vendor's standard terms of service without customization to expedite the contract.

Answer

Transfer all accountability for data protection compliance to the vendor through a liability waiver.

Question 15

A healthcare organization is revising its privacy governance structure after a series of data incidents involving unauthorized access by employees. The board wants to ensure accountability and reduce future risks. Which TWO of the following actions should be prioritized to strengthen governance? (Choose two.)

Accepted Answer

Establish a privacy steering committee that includes senior leaders from legal, IT, and clinical operations.. Mandatory role-based training and a cross-functional steering committee directly address the governance gaps that led to unauthorized access. Training reduces human error and builds awareness, while the committee ensures accountability and strategic oversight. Together, they create a stronger privacy culture and structure.

Answer

Increase the number of privacy impact assessments conducted annually.

Answer

Publish a revised privacy notice on the organization's website.

Answer

Delegate all privacy decision-making to the IT security department.

Question 16

A privacy steering committee is being established to oversee a company's privacy program. The committee must ensure that privacy risks are effectively managed across the organization. Which TWO of the following are the MOST important responsibilities of this committee? (Choose two.)

Accepted Answer

Reviewing and resolving escalated privacy issues and conflicts. The privacy steering committee is a governance body responsible for strategic direction, resource allocation, and resolving escalated privacy issues. It does not engage in operational tasks like daily monitoring, training material development, or technical assessments. By focusing on these high-level responsibilities, the committee ensures that privacy risks are managed consistently and that the program has the necessary support and authority.

Answer

Conducting daily monitoring of privacy compliance activities

Answer

Developing detailed privacy training materials for employees

Answer

Performing technical vulnerability assessments on privacy systems

Question 17

A multinational corporation is establishing a privacy governance framework. The Chief Privacy Officer wants to ensure that the framework includes mechanisms for ongoing oversight and accountability. Which TWO of the following are essential governance components for achieving this objective? (Choose two.)

Accepted Answer

A privacy steering committee that meets regularly to review privacy performance and make strategic decisions.. Ongoing oversight and accountability require structural mechanisms. A privacy steering committee provides regular review and strategic direction, while clearly defined roles and responsibilities designate who is accountable for privacy outcomes. Together, these components ensure continuous governance. Training, one-time assessments, and published policies are supportive but do not by themselves establish sustained oversight and accountability.

Answer

An annual privacy training session for all employees.

Answer

A one-time privacy risk assessment conducted at the start of the program.

Answer

A privacy policy that is published on the company website.

Question 18

Which TWO of the following are primary benefits of establishing a mature privacy governance program?

Accepted Answer

Enhanced consumer trust and brand reputation.. Option A is correct because a mature privacy governance program demonstrates accountability and transparency in handling personal data, which directly strengthens consumer trust and enhances brand reputation. Option D is correct because such a program aligns organizational practices with privacy laws and regulations (e.g., GDPR, CCPA), thereby reducing the likelihood and severity of regulatory fines and legal penalties. Option B is not correct because revenue increases are not an automatic or guaranteed outcome of privacy governance; they depend on many business factors. Option C is not correct because privacy governance complements, rather than replaces, the IT department's operational and security responsibilities. Option E is not correct because no governance program can guarantee that data breaches will never occur; it can only reduce risk and improve response readiness.

Answer

Automatic increase in quarterly revenue.

Answer

Elimination of the need for an IT department.

Answer

Guarantee that no data breaches will ever occur.

Question 19

A privacy program manager is updating the organization's privacy governance charter to reflect new regulatory requirements. The charter must define the authority and responsibilities of the privacy office. Which two of the following are essential to include in the charter to ensure the privacy office can effectively enforce compliance? (Choose two.)

Accepted Answer

The privacy office has the authority to approve or reject new data processing activities that pose unacceptable privacy risks.. A governance charter must grant the privacy office both preventive authority (approving or rejecting risky processing) and corrective authority (imposing sanctions). These powers enable the privacy office to enforce compliance effectively and ensure privacy is integrated into business processes. Without them, the privacy office cannot fulfill its oversight role.

Answer

The privacy office is responsible for negotiating all contracts with third-party data processors.

Answer

The privacy office reports directly to the Chief Financial Officer to ensure budget alignment.

Answer

The privacy office must obtain approval from the marketing department before updating privacy policies.

Question 20

Which TWO of the following are key components of a robust privacy governance framework?

Accepted Answer

Clear assignment of roles and responsibilities.. Option A is correct because a robust privacy governance framework requires clearly defined roles and responsibilities—such as a Data Protection Officer, privacy stewards, and data owners—so accountability for handling personal data is unambiguous and enforceable. Option E is correct because documented privacy policies and procedures translate legal and regulatory requirements (e.g., GDPR, CCPA) into repeatable operational controls, covering data classification, retention, consent, breach response, and subject-access requests. The unmarked options do not belong: blocking all internet access (B) is an extreme, impractical network control rather than a governance component; the office floor plan (C) is a facilities artifact with no bearing on privacy accountability or process; and collecting employee social media passwords (D) is itself a privacy violation and a security risk, not a governance control.

Answer

A mandate to block all internet access.

Answer

The office floor plan.

Answer

A list of employee social media passwords.