CIPM Exam QuestionsBrowse all questions from this exam

CIPM Exam - Question 42


In regards to the collection of personal data conducted by an organization, what must the data subject be allowed to do?

Show Answer
Correct Answer: C,D

The data subject must be allowed to challenge the authenticity of their personal data and have it corrected if needed. This right is known as the 'right to rectification,' which allows individuals to ensure that their personal data is accurate and to request corrections if it is not. The other options do not encapsulate a primary right afforded to data subjects under common regulatory frameworks such as the GDPR.

Discussion

11 comments
Sign in to comment
katizetiOption: D
Mar 8, 2023

shouldn't be D?

BoerenkoolOption: D
Mar 11, 2023

Think it must be D. The controller defines the time to store. The data subject can request for erasure or object to the processing. But time limits can also be defined by law so this right cannot always be honoured

LutonOption: D
Apr 20, 2023

Should be D

FSampaioOption: D
Mar 18, 2023

If it is Consent, could be C, but I think letter D should be right.

DracoLOption: D
May 2, 2023

again the answer give doesnt make any sense. Should be D.

DracoLOption: D
May 8, 2023

D should be correct

creativesydeOption: D
Aug 2, 2023

D is the best answer

SsouravOption: D
Aug 26, 2023

This right is commonly known as the "right to rectification." Data subjects should be able to ensure that their personal data is accurate and have the right to have inaccurate personal data rectified or completed if it is incomplete.

[Removed]Option: D
Sep 2, 2023

Should be D

carlosbuiOption: D
Nov 2, 2023

Should be D

RocketlyOption: D
Jul 2, 2024

Data subject does not determine retention periods - the organisation decides and documents these. However individuals do have the right to challenge inaccuracies in their personal data and request rectification