CIPM: Certified Information Privacy ManagerDemo

Question

The senior advisor, Spencer, has a misconception about which matter?

A The amount of responsibility that a data controller retains.
B The appropriate role of an organization's security department.
C The degree to which training can lessen the number of security incidents.
D The role of Human Resources employees in an organization's privacy program.

Explanation

A data controller remains primarily responsible for compliance, including assessing processor safeguards and making required breach notifications to authorities and affected individuals. A processor may be contractually required to assist and may have its own liabilities, but that arrangement does not transfer the controller’s accountability for personal-data processing or protect it from all claims and regulatory action.

Learn more

CIPM: Certified Information Privacy ManagerDemo

AstroTutor

Notes

Readiness

QuestionQ26

Community Discussion