Exam CIPP-E topic 1 question 287 discussion

Actual exam question from IAPP's CIPP-E

Question #: 287
Topic #: 1

Through a combination of hardware failure and human error, the decryption key for a bank's customer account transaction database has been lost. An investigation has determined that this was not the result of hacking or malfeasance, simply an unfortunate combination of circumstances. Which of the following accurately indicates the nature of this incident?

A. A data breach has not occurred because the loss was not the result of hacking.
B. A data breach has not occurred because no data was exposed to any unauthorized individual
C. A data breach has occurred because the loss of the key has resulted in the data no longer being accessible
D. A data breach has occurred because the loss of the key has resulted in the loss of confidentiality or integrity of the data

Show Suggested Answer

Suggested Answer: B 🗳️

by 56b03b1 at May 26, 2025, 7:51 a.m.

Comments

Submit Cancel

56b03b1

3 weeks ago

Selected Answer: C

Should be C. According to the European Data Protection Board (EDPB), a personal data breach is defined as a security incident that leads to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access to personal data. This includes breaches affecting the confidentiality, integrity, or availability of data.

upvoted 1 times

...