nerdexam
Isaca

CDPSE · Question #187

An organization is creating a personal data processing register to document actions taken with personal data. Which of the following categories should document controls relating to periods of retentio

The correct answer is A. Data archiving. Data archiving (A) is correct because archiving specifically governs how long data is retained before being deleted or permanently stored - making it the natural home for retention period controls in a data processing register. Data storage (B) refers to where and how data is hel

Data Life Cycle

Question

An organization is creating a personal data processing register to document actions taken with personal data. Which of the following categories should document controls relating to periods of retention for personal data?

Options

  • AData archiving
  • BData storage
  • CData acquisition
  • DData input

How the community answered

(31 responses)
  • A
    87% (27)
  • B
    3% (1)
  • C
    3% (1)
  • D
    6% (2)

Explanation

Data archiving (A) is correct because archiving specifically governs how long data is retained before being deleted or permanently stored - making it the natural home for retention period controls in a data processing register. Data storage (B) refers to where and how data is held at rest, not how long it should be kept, making it a common trap answer. Data acquisition (C) covers how personal data is collected and obtained, which precedes any retention consideration. Data input (D) relates to the mechanics of entering data into a system, which has no bearing on lifecycle or retention policy.

Memory tip: Think of the word archive - it implies putting something away for a defined period before eventual disposal, which maps directly to the concept of a retention schedule.

Topics

#Data retention#Data archiving#Processing register#GDPR

Community Discussion

No community discussion yet for this question.

Full CDPSE Practice