Privacy Risk Management

Intrusion and decisional interference, dark patterns, software security risks, tracking and surveillance technologies, workplace technologies including AI, and monitoring privacy risk with audits, indicators and impact assessments.

5 minutes 5 Questions

In the Certified Information Privacy Technologist (CIPP/T, now CIPT) context, Privacy Risk Management is the structured process of identifying, analyzing, evaluating, and treating risks that arise when technology systems collect, use, store, share, or dispose of personal information. Unlike traditi…

Concepts covered
Detecting Software Privacy VulnerabilitiesIntrusion Detection and PreventionE-commerce Privacy Risks: Chatbots and Behavioral AdvertisingDark Patterns That Limit Privacy-Preserving ChoicesE-commerce Privacy Risks: Cookies and Online PaymentsInterference from Behavioral Advertising and Behavioral ProfilingMobile DevicesCyberbullying and Social EngineeringPrivacy AuditsLocation TrackingFixing Software Privacy VulnerabilitiesPrivacy and Data Protection Impact AssessmentsBiometrics: Facial, Speech, Fingerprint and DNAPrivacy Violations by Service ProvidersIT Control ReviewsPrivacy Key Performance IndicatorsVideo Calls, Conferencing and MessagingPrivacy Design Patterns to EmulateAudio and Video SurveillanceInternet Monitoring and Web TrackingPrivacy Key Risk IndicatorsSocial Media and Gaming PlatformsPrivacy Risks in Change Management: Patches and UpgradesWearables, Smart Home Devices and Smart City IoTPrivacy Risks of AI, Machine Learning and Deep Learning
Test mode:
Start practice test

CIPT - Privacy Risk Management Example Questions

Test your knowledge of Privacy Risk Management

Question 1

A privacy technologist has deployed an automated workflow that deletes customer records once their retention period ends. Leadership asks for one Key Performance Indicator to include in a monthly privacy dashboard. It must show whether the workflow is meeting the retention requirement, not just whether the team is busy. Which metric BEST serves this purpose?

Correct Answer: Percentage of expired records actually purged within the defined retention window

The percentage of expired records actually purged within the defined retention window is the best choice because it directly measures the outcome leadership cares about: whether data is deleted on time, as the retention requirement demands.
Counting configured deletion jobs measures activity, not results, since jobs can exist yet fail or miss records. Training completion counts are an awareness input metric with no link to actual deletion performance. Total data volume stored is too broad, because it can change for many reasons unrelated to retention compliance.
Key concept: outcome-based KPIs versus activity or vanity metrics, meaning a good KPI measures how well a privacy control works, not how much effort goes into it.

Question 2

What is the primary privacy advantage of a user-resettable mobile advertising identifier over a permanent hardware identifier such as the device serial number?

Correct Answer: Users can sever links between past and future tracking profiles

Resetting the advertising identifier generates a new value, so users can sever the link between historical tracking data and future activity. A permanent hardware identifier like a serial number cannot be changed and enables indefinite profiling.
The encryption option is wrong because advertising identifiers are plain identifiers, not encryption mechanisms, and ad networks see collected data in usable form. The anonymization option is wrong because a resettable identifier is still a persistent pseudonymous identifier that singles out a device, so the data remains personal data under laws such as the GDPR. The contact list option is wrong because app access to contacts is governed by separate OS permission controls.
Key concept: unlinkability through resettable pseudonymous identifiers versus persistent hardware identifiers.

Question 3

A privacy technologist is performing an IT control review of a customer database. The organization's privacy notice says customer records are erased once their retention period ends, and a scheduled job is documented as the control that enforces this. Which review step BEST provides evidence that this control is actually operating as intended?

Correct Answer: Sample records past their retention date and verify they were purged

Sampling records that have passed their retention date and confirming they were actually purged gives direct, objective evidence that the deletion job works in practice. This is a test of operating effectiveness.
Reviewing the approved retention schedule only confirms that the control is designed and documented. It does not show the job executes. Interviewing database administrators produces testimonial evidence, which is weak and unverified. Checking encryption at rest addresses confidentiality, not erasure. Encrypted records still being present past retention would actually show that the deletion control failed.
Key concept: testing operating effectiveness of a control through direct evidence, as opposed to reviewing design documentation or relying on inquiry.

More Privacy Risk Management questions
694 questions (total)
Practice 100 questions
One session at a time, always new questions