CIPT: Certified Information Privacy TechnologistDemo

By IAPP · Question Mode

QuestionQ299

Privacy Risk Assessment and Risk Management

Which activity should a privacy technologist perform to reduce potential privacy risk when assessing options for processing data in a country other than the one where it was collected?

  • A Update the Record of Processing Activities (RoPA)
  • B Mandate the use of strong encryption
  • C Create enterprise data flow diagrams
  • D Recommend controls for data transfers
Explanation

Cross-border processing requires transfer-specific controls to preserve appropriate protection for personal data, such as assessing an adequate transfer mechanism and applying relevant contractual, organizational, or technical safeguards. European Commission guidance identifies mechanisms including adequacy decisions, standard contractual clauses, binding corporate rules, certification mechanisms, and codes of conduct as safeguards for international transfers.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!