IAPP
CIPM · Question #293
You're managing the internal privacy mailbox and are notified that a sales team member recently sent emails to their clients that included an excel spreadsheet of their client data. They just…
The correct answer is B. Ask what type of data was included on the spreadsheet and trigger an incident notice. See the full explanation below for the reasoning.
Question
You're managing the internal privacy mailbox and are notified that a sales team member recently sent emails to their clients that included an excel spreadsheet of their client data. They just realized that the spreadsheet only hid the data of other clients and was not deleted. How do you respond?
Options
- AConfirm they have deleted the spreadsheet and requested all clients to do the same.
- BAsk what type of data was included on the spreadsheet and trigger an incident notice.
- CAsk them to send you the spreadsheet and advise them to notify the clients' cyber security team.
- DConfirm how many people received the spreadsheet and advise the employee to keep this issue to
How the community answered
(19 responses)- A5% (1)
- B79% (15)
- C11% (2)
- D5% (1)
Community Discussion
No community discussion yet for this question.