IAPP Updated CIPM Exam Questions and Answers by theadora

The metric life cycle is a process that involves collecting, accessing, analyzing, reporting, and destroying data. These aspects are essential for measuring the performance and effectiveness of privacy programs. References: IAPP CIPM Study Guide, page 14.

Under the GDPR, a written agreement between the controller and processor in relation to processing conducted on the controller’s behalf must include an obligation on the processor to assist the controller in complying with the controller’s obligations to notify the supervisory authority about personal data breaches. This is one of the requirements under Article 28(3)(f) of the GDPR, which specifies the minimum content of such an agreement. The other options are not required by the GDPR, although they may be agreed upon by the parties as additional terms. References: GDPR, Article 28(3)(f).

A single attribute is a term that describes a piece of personal data that alone may not identify an individual, such as a first name or a zip code. However, when combined with other attributes, it may become identifiable. References: IAPP CIPM Study Guide, page 18.