nerdexam
Isaca

CDPSE · Question #35

Which of the following is MOST likely to present a valid use case for keeping a customer's personal data after contract termination?

The correct answer is C. A required retention period due to regulations. Privacy regulations such as GDPR, HIPAA, and financial laws often mandate that certain records be retained for defined periods regardless of the customer relationship status. This creates a lawful, documented basis for retaining data after contract termination. Marketing campaign

Data Life Cycle

Question

Which of the following is MOST likely to present a valid use case for keeping a customer's personal data after contract termination?

Options

  • AFor the purpose of medical research
  • BA forthcoming campaign to win back customers
  • CA required retention period due to regulations
  • DEase of onboarding when the customer returns

How the community answered

(29 responses)
  • A
    3% (1)
  • B
    10% (3)
  • C
    79% (23)
  • D
    7% (2)

Explanation

Privacy regulations such as GDPR, HIPAA, and financial laws often mandate that certain records be retained for defined periods regardless of the customer relationship status. This creates a lawful, documented basis for retaining data after contract termination. Marketing campaigns (B) and ease of re-onboarding (D) are business conveniences, not legitimate legal grounds. Medical research (A) requires separate consent and legal basis. Regulatory retention requirements are the only option that provides a clear, enforceable, and compliant justification for keeping data beyond its original collection purpose.

Topics

#Data Retention#Legal Basis for Processing#Data Life Cycle Management#Compliance Obligations

Community Discussion

No community discussion yet for this question.

Full CDPSE Practice