QUESTION: 105

Which of the following CANNOT be effectively determined during a code audit?

Whether access control logic is recommended in all cases.
Whether data is being incorrectly shared with a third-party.
Whether consent is durably recorded in the case of a server crash.
Whether the differential privacy implementation correctly anonymizes data.

Answer(s): D

An EU marketing company is planning to make use of personal data captured to make automated decisions based on profiling. In some cases, processing and automated decisions may have a legal effect on individuals, such as credit worthiness.

When evaluating the implementation of systems making automated decisions, in which situation would the company have to accommodate an individual's right NOT to be subject to such processing to ensure compliance under the General Data Protection Regulation (GDPR)?

When an individual's legal status or rights are not affected by the decision.
When there is no human intervention or influence in the decision-making process.
When the individual has given explicit consent to such processing and suitable safeguards exist.
When the decision is necessary for entering into a contract and the individual can contest the decision.

Answer(s): B

Reveal Solution Next Question

QUESTION: 107

SCENARIO
Please use the following to answer next question:
EnsureClaim is developing a mobile app platform for managing data used for assessing car accident insurance claims. Individuals use the app to take pictures at the crash site, eliminating the need for a built-in vehicle camer

EnsureClaim uses a third-party hosting provider to store data collected by the app. EnsureClaim customer service employees also receive and review app data before sharing with insurance claim adjusters.
The app collects the following information:
First and last name
Date of birth (DOB)
Mailing address
Email address
Car VIN number
Car model
License plate
Insurance card number
Photo
Vehicle diagnostics
Geolocation
The app is designed to collect and transmit geolocation data. How can data collection best be limited to the necessary minimum?
Allow user to opt-out geolocation data collection at any time.
Allow access and sharing of geolocation data only after an accident occurs.
Present a clear and explicit explanation about need for the geolocation data.
Obtain consent and capture geolocation data at all times after consent is received.

Answer(s): C

Explanation:

By providing users with a clear and explicit explanation about why geolocation data is needed and how it will be used, the app can help ensure that only the minimum amount of data necessary is collected. This can also help build trust with users and increase transparency.

Reveal Solution Next Question

QUESTION: 108

SCENARIO
Please use the following to answer next question:
EnsureClaim is developing a mobile app platform for managing data used for assessing car accident insurance claims. Individuals use the app to take pictures at the crash site, eliminating the need for a built-in vehicle camer

EnsureClaim uses a third-party hosting provider to store data collected by the app. EnsureClaim customer service employees also receive and review app data before sharing with insurance claim adjusters.
The app collects the following information:
First and last name
Date of birth (DOB)
Mailing address
Email address
Car VIN number
Car model
License plate
Insurance card number
Photo
Vehicle diagnostics
Geolocation
All of the following technical measures can be implemented by EnsureClaim to protect personal information that is accessible by third-parties EXCEPT?
Encryption.
Access Controls.
De-identification.
Multi-factor authentication.

Answer(s): B

Reveal Solution Next Question

Free CIPT Exam Braindumps (page: 28)

QUESTION: 105

QUESTION: 106

QUESTION: 107

Explanation:

QUESTION: 108

CIPT Discussions & Posts