Certified Information Privacy Professional CIPPE · Free Practice Question Medium
Question 12
Cathy is a student at an international university in Florence. She would like to change universities and has been working on finalizing a transfer application to another university in California. However, the university is requesting for her student records as part of the evaluation process. Cathy requests the international university to provide access to their student record.
The university keeps records for access requests in a folder. A folder was created with Cathy's university records and made available for access on the university website.
It was, however, made openly available on the university website. A journalist discovered Cathy's personal data on the website and calls the university.
After discovering the breach, what is the first task that should be completed by the university?
- A Coordinate with the security team to assess the damage
-
B
Determine whether notification to Cathy is required
- C Update its security controls
- D Create a better process for data subject's access to data
Reveal correct answer
Correct answer: B
Explanation
The university will need to determine if they need to notify the student in case the breach is likely to cause a high risk to the rights and freedom of the student.Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
