CDPSE: Certified Data Privacy Solutions Engineer

By Isaca · Question Mode

QuestionQ81

VerifiedPrivacy Engineering

A debt collection agency is trying to locate a debtor and gathers information about several people with similar names. During the inquiry, some of these people are ruled out. How should the agency determine what data is adequate, relevant, and limited?

Explanation

Data minimisation requires retaining only personal data that is adequate, relevant, and necessary for the processing purpose. For people ruled out during a debtor search, the agency should delete most of their data while keeping only the minimum needed to maintain a basic record that they were excluded, helping avoid contacting them again about a debt that is not theirs.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!