You are the privacy officer at a university.

Vendor: IAPP
Product: CIPM
Update on: Feb 8, 2026
Questions: 262

IAPP CIPM Question Answer

You are the privacy officer at a university. Recently, the police have contacted you as they suspect that one of your students is using a library computer to commit financial fraud. The police would like your assistance in investigating this individual and are requesting computer logs and usage data of the student.

What Is your first step in responding to the request?

Refuse the request as the police do not have a warrant.

Provide the data to police and record it for your own archives.

Contact the university's legal counsel to determine if the request is lawful.

Review policies, procedures and legislation to determine the university's obligation to co-operate with the police.