CIPM Exam QuestionsBrowse all questions from this exam

CIPM Exam - Question 100


SCENARIO -

Please use the following to answer the next question:

As they company’s new chief executive officer, Thomas Goddard wants to be known as a leader in data protection. Goddard recently served as the chief financial officer of Hoopy.com, a pioneer in online video viewing with millions of users around the world. Unfortunately, Hoopy is infamous within privacy protection circles for its ethically questionable practices, including unauthorized sales of personal data to marketers. Hoopy also was the target of credit card data theft that made headlines around the world, as at least two million credit card numbers were thought to have been pilfered despite the company’s claims that “appropriate” data protection safeguards were in place. The scandal affected the company’s business as competitors were quick to market an increased level of protection while offering similar entertainment and media content. Within three weeks after the scandal broke, Hoopy founder and CEO Maxwell Martin, Goddard’s mentor, was forced to step down.

Goddard, however, seems to have landed on his feet, securing the CEO position at your company, Medialite, which is just emerging from its start-up phase. He sold the company’s board and investors on his vision of Medialite building its brand partly on the basis of industry-leading data protection standards and procedures. He may have been a key part of a lapsed or even rogue organization in matters of privacy but now he claims to be reformed and a true believer in privacy protection. In his first week on the job, he calls you into his office and explains that your primary work responsibility is to bring his vision for privacy to life. But you also detect some reservations. “We want Medialite to have absolutely the highest standards,” he says. “In fact, I want us to be able to say that we are the clear industry leader in privacy and data protection. However, I also need to be a responsible steward of the company’s finances. So, while I want the best solutions across the board, they also need to be cost effective.”

You are told to report back in a week’s time with your recommendations. Charged with this ambiguous mission, you depart the executive suite, already considering your next steps.

You are charged with making sure that privacy safeguards are in place for new products and initiatives. What is the best way to do this?

Show Answer
Correct Answer: B

Instituting Privacy by Design principles and practices across the organization is the best way to ensure that privacy safeguards are integrated into new products and initiatives. Privacy by Design ensures that privacy considerations are embedded from the very beginning and throughout the entire process, rather than being added as an afterthought. This proactive approach helps build stronger privacy protections and can be more cost-effective in the long run, as it reduces the likelihood of potential breaches and the costs associated with addressing privacy issues after they occur.

Discussion

5 comments
Sign in to comment
SsouravOption: B
Sep 14, 2023

B. Institute Privacy by Design principles and practices across the organization. Privacy by Design principles ensure that privacy considerations are integrated from the very beginning and throughout the entire product or initiative development process. This proactive approach not only ensures that privacy safeguards are in place from the start but can also be more cost-effective in the long run as it helps prevent potential breaches or issues that might arise later, saving on potential fines, reputational damage, and corrective actions.

emily0922Option: B
Aug 14, 2023

Should be B, B covers C also

ET1857Option: B
Nov 7, 2023

PbD covers the requirements phase also. But C - starts with development phase

carlosbuiOption: B
Dec 1, 2023

Should be B

krishccieOption: B
Dec 26, 2023

privacy by design