Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.
exam questions

Exam CIPT All Questions

View all questions & answers for the CIPT exam

Exam CIPT topic 1 question 110 discussion

Actual exam question from IAPP's CIPT
Question #: 110
Topic #: 1
[All CIPT Questions]

SCENARIO -
Please use the following to answer next question:
EnsureClaim is developing a mobile app platform for managing data used for assessing car accident insurance claims. Individuals use the app to take pictures at the crash site, eliminating the need for a built-in vehicle camera. EnsureClaim uses a third-party hosting provider to store data collected by the app. EnsureClaim customer service employees also receive and review app data before sharing with insurance claim adjusters.
The app collects the following information:
✑ First and last name
✑ Date of birth (DOB)
✑ Mailing address
✑ Email address
✑ Car VIN number
✑ Car model
✑ License plate
✑ Insurance card number
✑ Photo
✑ Vehicle diagnostics
✑ Geolocation
What would be the best way to supervise the third-party systems the EnsureClaim App will share data with?

  • A. Review the privacy notices for each third-party that the app will share personal data with to determine adequate privacy and data protection controls are in place.
  • B. Conduct a security and privacy review before onboarding new vendors that collect personal data from the app.
  • C. Anonymize all personal data collected by the app before sharing any data with third-parties.
  • D. Develop policies and procedures that outline how data is shared with third-party apps.
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Ssourav
3 months, 2 weeks ago
Selected Answer: B
B. Conduct a security and privacy review before onboarding new vendors that collect personal data from the app. Conducting a security and privacy review before onboarding new vendors ensures that the third-party systems meet the necessary privacy and data protection standards before they handle personal data. This proactive approach helps mitigate risks related to data breaches or non-compliance.
upvoted 1 times
...
Stants
10 months ago
The best way to supervise the third-party systems that the EnsureClaim App will share data with is Option B: Conduct a security and privacy review before onboarding new vendors that collect personal data from the app. This approach ensures that any third-party systems have adequate security and privacy measures in place before any data is shared with them. It allows for potential issues to be identified and addressed before any personal data is put at risk. While all the options listed are important aspects of data management and security, conducting a security and privacy review before onboarding new vendors provides a proactive approach to data protection. So, the answer is Option
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...