CIPM Exam Prep Questions & Answers

What are the overarching objectives to first establish a privacy program? - ANS -

1) Define Vision

2) Set privacy strategy

3) Develop the team and methods to measure

Secondary:

1) Set expectations

2) Ensure daily operations align with objectives

3) Grant Power

Developing Company Vision Steps - ANS - 1) Mission Statement: short statement (2-4

sentences) regarding why you make the privacy decisions you do, what it is that you do, show

the value placed on privacy, define objectives, define roles

2) Develop Privacy Program Scope: to develop scope, must identify the data, sources of data, the

law, the information privacy and security minimum requirements within such law, and the

repercussions for failing to conform

3) Obtain executive sponsorship for program

Primary Concern of In-House Privacy Professional - ANS - Ensure all law, regs, contractual

commitments and industry practices are followed

Developing Vision>Privacy Program Scope - ANS - 1) Know the law

2) Know the data

Developing Vision>Privacy Program Scope > Know the Data - ANS - Think of the organization

as a heat map and/or a plumbing system. Trying to keep all data within the plumbing without any

leaks. In areas of high PI processing, and an emphasis on areas of sensitive PI processing, the

heatmap becomes more intense.