Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.
exam questions

Exam CIPM All Questions

View all questions & answers for the CIPM exam

Exam CIPM topic 1 question 204 discussion

Actual exam question from IAPP's CIPM
Question #: 204
Topic #: 1
[All CIPM Questions]

When vetting third-party processors of data protected by the General Data Protection Regulation (GDPR), why is it important to know the physical location of stored personal data from clients?

  • A. To determine their incidence response time.
  • B. To determine the country laws that would govern the contract.
  • C. To determine the likelihood of a security breach in the location.
  • D. To ensure the country has adequate protection or if safeguards are required.
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Ssourav
1 year, 2 months ago
Selected Answer: D
The answer is D. To ensure the country has adequate protection or if safeguards are required. Under GDPR, it's crucial to ensure that personal data is transferred and stored in locations that provide adequate levels of protection for personal data. GDPR imposes restrictions on the transfer of personal data outside the European Economic Area (EEA), or the data must be safeguarded adequately if it is transferred to countries that do not have data protection laws that are deemed adequate by European standards. Knowing the physical location of data storage helps in understanding whether additional safeguards or mechanisms, such as Standard Contractual Clauses or Binding Corporate Rules, need to be put in place to ensure compliance with GDPR.
upvoted 2 times
...
SheeraLuna1
1 year, 2 months ago
Answer D.
upvoted 1 times
...
[Removed]
1 year, 2 months ago
Selected Answer: D
Should be D
upvoted 2 times
...
emily0922
1 year, 3 months ago
I suggest D too
upvoted 2 times
...
FSampaio
1 year, 7 months ago
Selected Answer: B
If the third-party is EU and it has adequate protection, so, which country laws would I see? I Think letter B.
upvoted 1 times
...
FSampaio
1 year, 7 months ago
If the third-party is EU and it has adequate protection, so, which country laws would I see? I Think letter B.
upvoted 1 times
...
Boerenkool
1 year, 8 months ago
Selected Answer: D
It is allowed to transfer personal data to countries which are determined adequate under GDPR
upvoted 3 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...