CDPSE: Certified Data Privacy Solutions EngineerDemo

By Isaca · Question Mode

QuestionQ81

Privacy Engineering

A debt collection agency is trying to locate a debtor and gathers information about several people with similar names. During the inquiry, some of these people are ruled out. How should the agency determine what data is adequate, relevant, and limited?

  • A The agency should keep only the minimum data needed to form a basic record of people removed from the search.
  • B The agency should delete all personal data collected after the debtor is found.
  • C The agency should keep the data collected but store in an anonymized format.
  • D The agency should keep the data collected and mark an indication on the people removed from the search.
Explanation

Data minimisation requires retaining only personal data that is adequate, relevant, and necessary for the processing purpose. For people ruled out during a debtor search, the agency should delete most of their data while keeping only the minimum needed to maintain a basic record that they were excluded, helping avoid contacting them again about a debt that is not theirs.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!