CIPM: Certified Information Privacy ManagerDemo

By IAPP · Question Mode

QuestionQ22

Privacy Operational Lifecycle: Protect

A marketing team routinely exports spreadsheets for analysis that include customer name, birthdate, and home address. These spreadsheets are regularly emailed among members of various teams, including employees who do not require such detailed data.

What is the best way to reduce overall risk?

  • A Set up security measures in the company’s email client to prevent spreadsheets with customer information to accidentally being sent to external recipients.
  • B Anonymize exportable data by creating categories of information, like age range and geographic region.
  • C Allow the free exchange of information to continue but require spreadsheets be password protected.
  • D Allow only certain users to export customer data from the database.
Explanation

Data minimization reduces privacy and security exposure by exporting only the level of detail needed for analysis. Using categories such as age ranges and geographic regions removes or generalizes direct and precise personal information, limiting the harm from unnecessary internal sharing.

Community Discussion

No comments yet. Be the first to start the discussion!