Exam CIPT: Certified Information Privacy Technologist

Some new questions:
Q
Which of the following would be an example of an ‘objective’ privacy harm to an individual, based on Calo’s Harm Dimensions?
A. Receiving spam following the sale of an email address.
B. Negative feelings derived from government surveillance.
C. Social media profile views indicating unexpected interest in a person.
D. Personal data inaccuracies present in a user’s social media profile.

Q
Which of the following is NOT a factor to consider in FAIR analysis?
A. The severity of the harm that might be caused by the privacy risk.
B. The capability of a threat actor to exploit the analyzed privacy risk.
C. The stage of the data life cycle in which the analyzed privacy risk occurs.
D. The probability that a threat actor’s attempts to exploit a privacy risk might succeed.

Q
Which of the following is the most important action to take prior to collecting personal data directly from a customer?
A. Define what data needs to be collected.
B. Define the purpose for collecting and using the data.
C. Identify business requirements for the data that will be collected.
D. Provide individuals with information about how their data will be used after collection.

……………