nerdexam
(ISC)2

CISSP · Question #882

The principle that personally identifiable information (PII) should be kept up-to-date and relevant to the purposes for which they are to be used is attributed to which fair information practice per t

The correct answer is D. Data Quality. The principle of Data Quality, within the OECD Fair Information Practice Principles, directly addresses the need for personally identifiable information (PII) to be accurate, complete, and relevant for its intended use.

Submitted by naveen.iyer· Mar 5, 2026Security and Risk Management

Question

The principle that personally identifiable information (PII) should be kept up-to-date and relevant to the purposes for which they are to be used is attributed to which fair information practice per the United States (US) Organization for Economic Cooperation and Development (OECD)?

Options

  • APurpose Specification
  • BSecurity Safeguards
  • CCollection Limitation
  • DData Quality

How the community answered

(29 responses)
  • B
    3% (1)
  • C
    3% (1)
  • D
    93% (27)

Why each option

The principle of Data Quality, within the OECD Fair Information Practice Principles, directly addresses the need for personally identifiable information (PII) to be accurate, complete, and relevant for its intended use.

APurpose Specification

Purpose Specification requires that the purposes for collecting personal data be specified at the time of collection and that data use be limited to those purposes.

BSecurity Safeguards

Security Safeguards mandates that reasonable security measures must be in place to protect personal data from risks such as loss or unauthorized access, modification, or disclosure.

CCollection Limitation

Collection Limitation dictates that there should be limits on the collection of personal data, which should be obtained by lawful and fair means, preferably with the data subject's knowledge or consent.

DData QualityCorrect

The Data Quality Principle within the OECD Fair Information Practice Principles (FIPPs) explicitly states that personal data should be relevant to the purposes for which it is to be used, and, to the extent necessary for those purposes, should be accurate, complete, and kept up-to-date. This directly matches the question's description of keeping PII up-to-date and relevant for its intended purposes.

Concept tested: OECD Fair Information Practice Principles (FIPPs)

Source: https://www.oecd.org/sti/ieconomy/oecdguidelinesontheprotectionofprivacyandtransborderflowsofpersonaldata.htm

Topics

#PII#Data privacy#OECD FIPs#Data quality

Community Discussion

No community discussion yet for this question.

Full CISSP Practice