IAPP Exam CIPP-C Topic 2 Question 42 Discussion

Actual exam question for IAPP's CIPP-C exam

Question #: 42
Topic #: 2

Which of the following incidents will require reporting to OPC?

AA sales report with aggregated information that was sent to the wrong person internally.

BA file with client ID, sales amount and sales date that was sent to the wrong processors who cannot identify the clients.

CAn organization's point-of-sale system that was subject to an attempted hack that was blocked by the organization's firewall.

DAs part of a freedom of information request, a nursing home that released an e-mail with everybody's e-mail address in the 'to' section unredacted.

Show Suggested Answer

Suggested Answer: A

by Denae at Jun 19, 2024, 05:53 AM

Limited Time Offer

25%

Off

Get Premium CIPP-C Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Sharan

6 months ago

Haha, the attempted hack that got blocked? That's just a day in the life for most organizations these days. I doubt the OPC would care about that one.

upvoted 0 times

...

Yuki

6 months ago

Hmm, I'm not so sure. Sending a file with client information to the wrong processors seems pretty bad too. That could lead to a data breach if they can't identify the clients.

upvoted 0 times

Almeta

5 months ago

C) An organization's point-of-sale system that was subject to an attempted hack that was blocked by the organization's firewall.

upvoted 0 times

...

Salena

5 months ago

B) That's true, sending client information to the wrong processors is a serious issue.

upvoted 0 times

...

Ellen

6 months ago

B) A file with client ID, sales amount and sales date that was sent to the wrong processors who cannot identify the clients.

upvoted 0 times

...

Adell

6 months ago

A) A sales report with aggregated information that was sent to the wrong person internally.

upvoted 0 times

...

Willow

7 months ago

That's true, both B and D could potentially harm individuals if misused.

upvoted 0 times

...

Andra

7 months ago

But what about option D? Releasing everyone's email address seems like a breach too.

upvoted 0 times

...

Fatima

7 months ago

I agree, D is the only one that involves a clear privacy violation. The other incidents don't seem to have the same level of risk or impact.

upvoted 0 times

Agustin

6 months ago

B) A file with client ID, sales amount and sales date that was sent to the wrong processors who cannot identify the clients.

upvoted 0 times

...

Gabriele

6 months ago

A) A sales report with aggregated information that was sent to the wrong person internally.

upvoted 0 times

...

Avery

7 months ago

I agree with Willow, client ID and sales information is sensitive.

upvoted 0 times

...

Berry

7 months ago

Option D is clearly the correct answer here. Releasing personal information like email addresses without consent is a serious breach that needs to be reported to the OPC.

upvoted 0 times