Certified Information Privacy Manager (CIPM) — Question 26

A marketing team regularly exports spreadsheets to use for analysis including customer name, birthdate and home address. These spreadsheets are routinely shared between members of various teams via email even with employees that do not need such granular data.

What is the best way to lower overall risk?

Answer options

• A. Set up security measures in the company’s email client to prevent spreadsheets with customer information to accidentally being sent to external recipients.
• B. Anonymize exportable data by creating categories of information, like age range and geographic region.
• C. Allow the free exchange of information to continue but require spreadsheets be password protected.
• D. Allow only certain users to export customer data from the database.

Correct answer: B

Explanation

The correct answer is B because anonymizing data reduces the risk of exposing sensitive customer information while still allowing for meaningful analysis. Option A focuses on email security, which does not address the core issue of data sensitivity. Option C still exposes detailed data, albeit password-protected, and option D limits access but does not address the broader risk of data exposure.