Exam CIPP-E topic 1 question 137 discussion

Actual exam question from IAPP's CIPP-E

Question #: 137
Topic #: 1

A company in France suffers a robbery over the weekend owing to a faulty alarm system. When it is determined that the break-in involves the loss of a substantial amount of data, the company decides on a CCTV system to monitor for future incidents. Company technicians install cameras in the entrance of the building, hallways and offices. Footage is recorded continuously, and is monitored by the home office in the United States. What is the most realistic step the company could take to address their security concerns and comply with the personal data processing principles set out in Article 5 of the GDPR?

A. Seek informed consent from company employees.
B. Have cameras recording during work hours only.
C. Retain captured footage for no more than 30 days.
D. Restrict camera placement to building entrances only.

Show Suggested Answer

Suggested Answer: D 🗳️

by Fendou at April 30, 2023, 6:45 a.m.

Comments

Submit Cancel

Fendou

Highly Voted 1 year, 7 months ago

Should be D

upvoted 6 times

...

Ssourav

Most Recent 3 months, 3 weeks ago

Selected Answer: D

D. Restrict camera placement to building entrances only: This step directly addresses the necessity and proportionality principles of GDPR. By restricting camera placement to areas where security incidents are most likely to occur (entrances), the company can reduce the intrusion into employees' privacy while still addressing the security concern. This approach is more likely to be seen as a proportionate response to the security risk.

upvoted 1 times

...

polar_b

4 months ago

D. Restrict camera placement to building entrances only.

upvoted 1 times

...

b399b45

8 months, 4 weeks ago

Selected Answer: D

Should be D

upvoted 3 times

...

blasto767

1 year, 6 months ago

I believe the answer is C

upvoted 4 times

...

Exam CIPP-E All Questions

View all questions & answers for the CIPP-E exam