Updated IAPP CIPP Exam Dumps – Your Path to Success

Question #1

Why was the Privacy Protection Act of 1980 drafted?

A. To respond to police searches of newspaper facilities

B. To assist prosecutors in civil litigation against newspaper companies

C. To assist in the prosecution of white-collar crimes

D. To protect individuals from personal privacy invasion by the police

View answer

Correct Answer: D

Question #2

SCENARIO -Please use the following to answer the next question:Javier is a member of the fitness club EVERFIT. This company has branches in many EU member states, but for the purposes of the GDPR maintains its primary establishment in France. Javier lives in Newry, Northern Ireland (part of the U.K.), and commutes across the border to work in Dundalk, Ireland. Two years ago while on a business trip, Javier was photographed while working out at a branch of EVERFIT in Frankfurt, Germany. At the time, Javier g

A. Submit a draft decision to other supervisory authorities for their opinion

B. Request that the other supervisory authorities provide the lead authority with a draft decision for its consideration

C. Submit a draft decision directly to the Commission to ensure the effectiveness of the consistency mechanism

D. Request that members of the seconding supervisory authority and the host supervisory authority co-draft a decision

View answer

Correct Answer: C

Question #3

Which is an exception to the general prohibitions on telephone monitoring that exist under the U.S. Wiretap Act?

A. Call center exception

B. Inter-company communications exception

C. Ordinary course of business exception

D. Internet calls exception

View answer

Correct Answer: C

Question #4

What practice does the USA FREEDOM Act NOT authorize?

A. Emergency exceptions that allow the government to target roamers

B. An increase in the maximum penalty for material support to terrorism

C. An extension of the expiration for roving wiretaps

D. The bulk collection of telephone data and internet metadata

View answer

Correct Answer: A

Question #5

Which was NOT listed as an individual right in the 1998 Fair Information Practice Principles (FIPPs)?

A. Notice

B. Choice

C. Right to erasure

D. Right to data access

View answer

Correct Answer: B

Question #6

What is the MAIN reason GDPR Article 4(22) establishes the concept of the “concerned supervisory authority”?

A. To encourage the consistency of local data processing activity

B. To give corporations a choice about who their supervisory authority will be

C. To ensure the GDPR covers controllers that do not have an establishment in the EU but have a representative in a member state

D. To ensure that the interests of individuals residing outside the lead authority’s jurisdiction are represented

View answer

Correct Answer: C

Question #7

On what group does Singapore's PDPA impose disclosure restrictions that Hong Kong and India do not?

A. Government officials

B. Children under 13

C. The deceased

D. The clergy

View answer

Correct Answer: A

Question #8

SCENARIO -Please use the following to answer the next question:Larry has become increasingly dissatisfied with his telemarketing position at SunriseLynx, and particularly with his supervisor, Evan. Just last week, he overheard Evan mocking the state’s Do Not Call list, as well as the people on it. “If they were really serious about not being bothered,” Evan said, “They’d be on the national DNC list. That’s the only one we’re required to follow. At SunriseLynx, we call until they ask us not to.”Bizarrely, Ev

A. The Whistleblower Protection Act

B. The Stored Communications Act (SCA)

C. The National Labor Relations Act (NLRA)

D. The Fair and Accurate Credit Transactions Act (FACTA)

View answer

Correct Answer: C

Question #9

SCENARIO -Please use the following to answer the next question:Larry has become increasingly dissatisfied with his telemarketing position at SunriseLynx, and particularly with his supervisor, Evan. Just last week, he overheard Evan mocking the state’s Do Not Call list, as well as the people on it. “If they were really serious about not being bothered,” Evan said, “They’d be on the national DNC list. That’s the only one we’re required to follow. At SunriseLynx, we call until they ask us not to.”Bizarrely, Ev

A. The applicability of federal law

B. The enforceability of local law

C. The strict nature of state law

D. The definition of tort law

View answer

Correct Answer: A

Question #10

In addition to the European Commission, who can adopt standard contractual clauses, assuming that all required conditions are met?

A. Approved data controllers

B. The Council of the European Union

C. National data protection authorities

D. The European Data Protection Supervisor

View answer

Correct Answer: A

Question #11

SCENARIO -Please use the following to answer the next question:You are the chief privacy officer at HealthCo, a major hospital in a large U.S. city in state A. HealthCo is a HIPAA-covered entity that provides healthcare services to more than 100,000 patients. A third-party cloud computing service provider, CloudHealth, stores and manages the electronic protected health information (ePHI) of these individuals on behalf of HealthCo. CloudHealth stores the data in state B. As part of HealthCo’s business associ

A. Reject the request because the HIPAA privacy rule only permits disclosure for payment, treatment or healthcare operations

B. Respond with a request for satisfactory assurances such as a qualified protective order

C. Turn over all of the compromised patient records to the plaintiff’s attorney

D. Respond with a redacted document only relative to the plaintiff

View answer

Correct Answer: C

Question #12

SCENARIO -Please use the following to answer the next question:Zandelay Fashion (‘Zandelay’) is a successful international online clothing retailer that employs approximately 650 people at its headquarters based in Dublin, Ireland. Martin is their recently appointed data protection officer, who oversees the company’s compliance with the General Data Protection Regulation (GDPR) and other privacy legislation.The company offers both male and female clothing lines across all age demographics, including childre

A. An evaluation of the complexity of the intended processing

B. An explanation of the purposes and means of the intended processing

C. Records showing that customers have explicitly consented to the intended profiling activities

D. Certificates that prove Martin’s professional qualities and expert knowledge of data protection law

View answer

Correct Answer: B

Question #13

What emerged as the main reason for creating a comprehensive data protection law when Singapore ministers met between 2005 and 2011?

A. To control increasing technological threats

B. To raise Singapore's human rights standing

C. To limit the scope of governmental surveillance

D. To enhance Singapore's economic competitiveness

View answer

Correct Answer: D

Question #14

Which personal data element is NOT considered a special category of data under the General Data Protection Regulation (GDPR)?

A. Physical or mental health data

B. Financial information

C. Race or ethnic origin

D. Political opinions

View answer

Correct Answer: A

Question #15

Under the General Data Protection Regulation (GDPR), European Union member states may be allowed to transfer personal data to the United States in some cases.Which of the following could NOT be used as a legitimate means of doing this?

A. A consent derogation

B. A certification mechanism

C. Privacy Shield

D. Ad-hoc contractual clauses

View answer

Correct Answer: C

Question #16

SCENARIO -Please use the following to answer the next question:Larry has become increasingly dissatisfied with his telemarketing position at SunriseLynx, and particularly with his supervisor, Evan. Just last week, he overheard Evan mocking the state’s Do Not Call list, as well as the people on it. “If they were really serious about not being bothered,” Evan said, “They’d be on the national DNC list. That’s the only one we’re required to follow. At SunriseLynx, we call until they ask us not to.”Bizarrely, Ev

A. Defamation

B. Discrimination

C. Intrusion upon seclusion

D. Publicity given to private life

View answer

Correct Answer: B

Question #17

The rules for “e-discovery” mainly prevent which of the following?

A. A conflict between business practice and technological safeguards

B. The loss of information due to poor data retention practices

C. The practice of employees using personal devices for work

D. A breach of an organization’s data retention program

View answer

Correct Answer: B

Question #18

SCENARIO -Please use the following to answer the next question:Zandelay Fashion (‘Zandelay’) is a successful international online clothing retailer that employs approximately 650 people at its headquarters based in Dublin, Ireland. Martin is their recently appointed data protection officer, who oversees the company’s compliance with the General Data Protection Regulation (GDPR) and other privacy legislation.The company offers both male and female clothing lines across all age demographics, including childre

A. Information about DPIAs found in Articles 38 through 40 of the GDPR

B. Data breach documentation that data controllers are required to maintain

C. Existing DPIA guides published by local supervisory authorities

D. Records of processing activities that data controllers are required to maintain

View answer

Correct Answer: A

Question #19

In what case would a foreign company NOT be liable for breaches of Singapore's PDPA?

A. If it has a physical office in Singapore

B. If it is storing information in Singapore

C. If it is collecting personal information in Singapore

D. If it collects information from Singaporeans living abroad

View answer

Correct Answer: D

Question #20

What clarification did India make in a 2011 Press Note regarding their Sensitive Personal Data Rules?

A. That the rules apply to data subjects located outside of India

B. That the rules apply to persons or companies collecting sensitive data within India

C. That the data processor must provide notice to the data subject before data is processed

D. That sensitive personal data or information includes passwords, financial information, medical records, and biometric information

View answer

Correct Answer: D

Question #21

Which of the following countries will continue to enjoy adequacy status under the GDPR, pending any future European Commission decision to the contrary?

A. Greece

B. Norway

C. Australia

D. Switzerland

View answer

Correct Answer: D

Question #22

Which of the following is NOT a way that the Singapore government can monitor its citizens?

A. Through the national identity card system

B. Through the electronic road pricing system

C. Through a personal computer registration system

D. Through an online service that holds an individual’s medical records

View answer

Correct Answer: D

DON'T WANT TO MISS A THING?

100% Pass Cisco, PMP, CISA, CISM, AWS Practice test on SALE!
Get Now

Updated IAPP CIPP Exam Dumps – Your Path to Success

View The Updated CIPP Exam Questions

View The Updated IAPP Exam Questions

View Answers after Submission

DON'T WANT TO MISS A THING?

100% Pass Cisco, PMP, CISA, CISM, AWS Practice test on SALE! Get Now

Updated IAPP CIPP Exam Dumps – Your Path to Success

View The Updated CIPP Exam Questions

View The Updated IAPP Exam Questions

View Answers after Submission

100% Pass Cisco, PMP, CISA, CISM, AWS Practice test on SALE!
Get Now