Exam CIPM topic 1 question 273 discussion

Actual exam question from IAPP's CIPM

Question #: 273
Topic #: 1

You're managing the internal privacy mailbox and are notified that a sales team member recently sent emails to their clients that included an excel spreadsheet of their client data. They just realized that the spreadsheet only hid the data of other clients and was not deleted. How do you respond?

A. Confirm they have deleted the spreadsheet and requested all clients to do the same.
B. Ask what type of data was included on the spreadsheet and trigger an incident notice.
C. Ask them to send you the spreadsheet and advise them to notify the clients' cyber security team.
D. Confirm how many people received the spreadsheet and advise the employee to keep this issue to themselves.

Show Suggested Answer

Suggested Answer: B 🗳️

by Rocketly at July 30, 2024, 7:04 p.m.

Comments

Submit Cancel

Vinz_

6 months, 1 week ago

Selected Answer: B

Answer A is wrong: why would the sales team member need to delete the email?

upvoted 3 times

...

Vinz_

6 months, 1 week ago

Selected Answer: B

Correct answer is B: the type of data included on the spreadsheet is important to determine the impact of the incident and whether a deletion request is necessary.

upvoted 4 times

...