Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.
exam questions

Exam CIPP-US All Questions

View all questions & answers for the CIPP-US exam

Exam CIPP-US topic 1 question 22 discussion

Actual exam question from IAPP's CIPP-US
Question #: 22
Topic #: 1
[All CIPP-US Questions]

SCENARIO -
Please use the following to answer the next question:
A US-based startup company is selling a new gaming application. One day, the CEO of the company receives an urgent letter from a prominent EU-based retail partner. Triggered by an unresolved complaint lodged by an EU resident, the letter describes an ongoing investigation by a supervisory authority into the retailer’s data handling practices.
The complainant accuses the retailer of improperly disclosing her personal data, without consent, to parties in the United States. Further, the complainant accuses the EU-based retailer of failing to respond to her withdrawal of consent and request for erasure of her personal data. Your organization, the US-based startup company, was never informed of this request for erasure by the EU-based retail partner. The supervisory authority investigating the complaint has threatened the suspension of data flows if the parties involved do not cooperate with the investigation. The letter closes with an urgent request: “Please act immediately by identifying all personal data received from our company.”
This is an important partnership. Company executives know that its biggest fans come from Western Europe; and this retailer is primarily responsible for the startup’s rapid market penetration.
As the Company’s data privacy leader, you are sensitive to the criticality of the relationship with the retailer.
Under the GDPR, the complainant’s request regarding her personal information is known as what?

  • A. Right of Access
  • B. Right of Removal
  • C. Right of Rectification
  • D. Right to Be Forgotten
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Bhimesh
7 months, 3 weeks ago
Selected Answer: D
Should be D. Right to Be Forgotten...
upvoted 1 times
...
8ab5356
9 months, 2 weeks ago
Also known as the right to erasure, the GDPR gives individuals the right to ask organizations to delete their personal data. Therefore, it could be A or D
upvoted 1 times
...
Romeokton
10 months ago
Selected Answer: D
Answer should be D
upvoted 1 times
...
PrivacyICU
1 year, 2 months ago
Selected Answer: D
The answer is D. GDPR doesn't use the term "removal", so don't be fooled. The wording in the law is everything on this exam. GDPR uses the right of modification or erasure. Erasure has come to mean colloquially as the right to be forgotten under GDPR. So although not in the law the right choice in the GDPR has a colloquial answer.
upvoted 1 times
...
PrivacyICU
1 year, 2 months ago
GDPR doesn't use the term "removal", so don't be fooled. The wording in the law is everything on this exam. GDPR uses the right of modification or erasure. Erasure has come to mean colloquially as the right to be forgotten under GDPR. So although not in the law the right choice in the GDPR has a colloquial answer.
upvoted 1 times
...
Supp2023
1 year, 8 months ago
The term "Right of Removal" is not a specific right granted under the GDPR. However, the Right to be Forgotten is often described as a right to request the removal or erasure of personal data, so it is possible that "Right of Removal" is being used as another term for the Right to be Forgotten. In any case, in the scenario you described, the complainant's request is specifically for the deletion or removal of her personal data, which is consistent with the Right to be Forgotten. So while the term "Right of Removal" may not be an official term used in the GDPR, it could potentially refer to the Right to be Forgotten in this context.
upvoted 3 times
...
Lisawood
1 year, 9 months ago
Right to removal/erasure is the same as right to be forgotten under GDPR
upvoted 2 times
Testtaker719
1 year, 9 months ago
Would the correct answer be D since it is asking under GDPR?
upvoted 3 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...