Data Life Cycle Management

Collecting and processing personal information (inventory, dataflows, classification, quality, use limitation, analytics) and its persistence and destruction (minimization, disclosure and transfer, retention, destruction).

5 minutes 5 Questions

In the ISACA Certified Data Privacy Solutions Engineer (CDPSE) framework, Data Life Cycle Management is a core domain. It focuses on governing personal data from creation or collection until secure disposal, so that privacy requirements are built into every stage rather than added afterward. The do…

Concepts covered
Classifying Personal InformationPurpose Specification and Use LimitationData Sharing Agreements and Transfer SafeguardsDataflow Diagrams and Data MappingRectification and Data Integrity ControlsSecure Storage of Personal InformationPrivacy in Data Warehouses and Data LakesVerifying and Recording Data DestructionPersonal Information InventorySecondary Use and Compatible PurposesDisclosure of Personal Information to Third PartiesCross-Border Data TransfersMinimization Techniques for Stored and Processed DataData Quality and AccuracyProfiling and Automated Decision-MakingArchiving and Legal HoldsKeeping Inventories and Dataflow Records CurrentData Destruction and Media SanitizationData Retention SchedulesEnforcing Use Limitation in SystemsDeletion in Backups, Replicas, and Cloud ServicesAggregation, Linkage, and Inference RisksData Minimization in Collection
Test mode:
Start practice test

CDPSE - Data Life Cycle Management Example Questions

Test your knowledge of Data Life Cycle Management

Question 1

A privacy engineer is moving archived customer records to a cloud service provider in another country for backup storage only. The transfer impact assessment found that authorities in the destination country can compel the provider to hand over stored data. The signed transfer clauses cannot bind those authorities. Which supplementary safeguard BEST reduces this residual transfer risk?

Correct Answer: Client-side encryption with keys retained solely by the exporting organization

Encrypting the data before it leaves the exporter, with keys held only by the exporter, means the provider stores nothing but ciphertext. Even if foreign authorities compel disclosure, the provider has nothing intelligible to hand over, which fits a backup-only use case where the provider never needs plaintext.
Provider-side encryption fails because the provider holds the keys and can be forced to decrypt. Pseudonymization fails because the mapping table sits with the provider, so the data can be re-identified on demand. A contractual challenge-and-report commitment cannot stop a lawful compelled disclosure, since the authorities are not bound by the contract.
Key concept: technical supplementary measures, exporter-controlled encryption keys, Schrems II.

Question 2

An enterprise sends decommissioned laptops that held customer personal information to a third-party vendor for sanitization. During a later privacy audit, the privacy engineer must demonstrate that the personal information on every device was actually rendered unrecoverable. Which record BEST provides this evidence?

Correct Answer: Certificate of destruction listing each device serial number, method used and date

A certificate of destruction that lists each device serial number, the sanitization method and the date is the best evidence. It is the vendor's after-the-fact attestation that each specific device was actually sanitized.
A signed vendor contract only shows that wiping was required, not that it happened. An asset inventory export marking laptops as retired is an internal status record and says nothing about how data was sanitized. A chain-of-custody form proves the devices were handed over at pickup, but not what happened to the data afterward.
Key concept: verifiable, device-level proof of completed media sanitization from third-party disposal vendors.

Question 3

A privacy engineer must sanitize leased solid-state drives that stored sensitive personal information before returning them to the lessor. The drives have built-in hardware encryption, and the lease prohibits physical destruction of the media. Which sanitization approach BEST ensures the personal information cannot be recovered from the drives?

Correct Answer: Perform a cryptographic erase of the media keys, then verify the outcome

Cryptographic erase destroys the media encryption keys on self-encrypting SSDs, which renders all stored data, including copies in over-provisioned and remapped areas, permanently unreadable without physically damaging the drive. Verifying the result confirms the sanitization succeeded.
A multi-pass overwrite is unreliable on SSDs because wear leveling and spare blocks keep some cells out of reach of logical-block writes. Degaussing does not work on flash memory, which stores data electrically rather than magnetically, and it can also damage the drive. Rotating the keys and reformatting may leave old keys or data recoverable, since a reformat removes only file system structures.
Key concept: media-appropriate sanitization (NIST SP 800-88 Purge via cryptographic erase).

More Data Life Cycle Management questions
618 questions (total)
Practice 100 questions
One session at a time, always new questions