Exam CIPT topic 1 question 259 discussion

Actual exam question from IAPP's CIPT

Question #: 259
Topic #: 1

An organization has completed the acquisition of a smaller rival in a different but related industry. The acquisition was approved by the regulator on the condition that the personal data sets may not be combined. A way of achieving this objective is through?

A. Encryption.
B. Disassociation.
C. k-anonymity.
D. Pseudonymization.

Show Suggested Answer

Suggested Answer: B 🗳️

by Stants at Feb. 29, 2024, 10:43 p.m.

Comments

Submit Cancel

hele_meneer

6 months, 3 weeks ago

Selected Answer: B

Pseudonymization doesn't prevent or mitigate combination of data

upvoted 1 times

...

Ssourav

11 months, 1 week ago

Selected Answer: B

**B. Disassociation.** **Explanation:** Disassociation involves keeping the data sets separate and ensuring that they are not combined, which aligns with the regulatory condition. This method prevents the merging of personal data from the two organizations, thereby complying with the requirement set by the regulator.

upvoted 2 times

...

Stants

1 year, 4 months ago

The best way to achieve the objective of not combining personal data sets after an acquisition is through B. Disassociation. Disassociation involves breaking the links between different data sets to prevent them from being combined. This can help ensure that the personal data sets of the two companies remain separate, thus complying with the regulator’s condition.

upvoted 2 times

Stants

1 year, 4 months ago

Pseudonymization (D) is a data management strategy where personally identifiable information fields are replaced with artificial identifiers or pseudonyms, but it doesn’t prevent data sets from being combined.

upvoted 2 times

...