nerdexam
IAPP

CIPM · Question #204

All the following statements are TRUE regarding data processing vendors and vendor selection EXCEPT:

The correct answer is D. The controller can only act on the instructions of the processor. See the full explanation below for the reasoning.

Question

All the following statements are TRUE regarding data processing vendors and vendor selection EXCEPT:

Options

  • APrivacy risks on the part of the vendor must be exposed and remedied
  • BPrivacy responsibilities must be clearly documented in the contract
  • CVendors must help the primary company report any data breaches
  • DThe controller can only act on the instructions of the processor

How the community answered

(31 responses)
  • A
    6% (2)
  • B
    3% (1)
  • C
    6% (2)
  • D
    84% (26)

Community Discussion

No community discussion yet for this question.

Full CIPM Practice