Exam CIPM topic 1 question 1 discussion

These things should already be recorded in the data inventory

By my trained gpt model

Analyzing the data inventory involves creating a comprehensive record of all the personal data that the organization collects, processes, and stores. This includes information about where the data is located, how it is used, who has access to it, and why it is important for the organization's operations. By conducting a thorough data inventory, the organization can gain insights into the scope of its data holdings, identify potential risks and compliance issues, and develop effective data management and protection strategies.

data inventory and mapping

data inventory and mapping

Data inventory

My personal view: the correct answer is C) Evaluating methods for collecting data. By doing so, you get an understanding of where data comes from and proceed with your own analysis. A) is wrong because data inventory might be either not present or inaccurate, and this is the case for the majority of the times in real scenarios. B) is wrong, security of data systems doesn't provide clues on the applicable legislations. D) is wrong because employees tasked with data entry might not be knowledgeable on where data comes from, how it is transmitted (e.g., unencrypted) and where is stored.

By analysing data inventory