CIPM: Certified Information Privacy ManagerDemo

By IAPP · Question Mode

QuestionQ29

Privacy Operational Lifecycle: Protect

Which statement is FALSE concerning the use of technical security controls?

  • A Technical security controls are part of a data governance strategy.
  • B Technical security controls deployed for one jurisdiction often satisfy another jurisdiction.
  • C Most privacy legislation lists the types of technical security controls that must be implemented.
  • D A person with security knowledge should be involved with the deployment of technical security controls.
Explanation

Privacy legislation commonly establishes a risk-based obligation to implement appropriate technical and organisational safeguards, rather than listing all specific technical security controls that must be deployed. GDPR Article 32 follows this approach by requiring security measures appropriate to the risk and giving non-exhaustive examples.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!