Certified Information Privacy Professional CIPPE Exam Questions & Answers

Practice 25 free Certified Information Privacy Professional CIPPE exam questions with answers and community-discussed explanations. Each question has its own page where you can reveal the correct answer and debate it in the comments.

All 25 questions

1. Q1 VideoCorp is a data controller that creates online video games. VideoCorp is concerned about the loss of market share as a result…
2. Q2 All of the following are areas where member states may diverge in the way the GDPR is implemented except:
3. Q3 A company decides to retain the personal data of job applicants indefinitely. The company is in breach of which data processing principle?
4. Q4 A customer requested a company to delete the personal data that the customer used to enroll in the company's ongoing Loyalty Program.…
5. Q5 Connect Corp, a global social networking platform requires individuals to provide their email address, names and mailing address before they create an…
6. Q6 When should an organization complete a Data Protection Impact Assessment under the GDPR?
7. Q7 According to the GDPR, the storage of a customer's phone number and email address in a company database is an example of:
8. Q8 Under the GDPR, can an organization request medical information from an applicant completing an application for a data analyst role?
9. Q9 An online payment platform collects government identification cards as additional information from customers to prevent fraud. What legal basis is the bank…
10. Q10 What can data controllers use to show that they are implementing technical and organizational measures compliant with the GDPR?
11. Q11 Company A, Company B and Company C decide to set up an internet-based common platform in order to collect feedback from customers…
12. Q12 Cathy is a student at an international university in Florence. She would like to change universities and has been working on finalizing…
13. Q13 Tina was receiving invoicing emails from Zell Communications despite no longer being a client. Tina had complained twice to Zell's Communications customer…
14. Q14 What is true about a company that was exposed to a ransomware attack, but the data that was exposed is encrypted?
15. Q15 A company that decides not to fulfill a data subject's deletion request related to removal of information concerning his criminal history that…
16. Q16 A company that fails to correct the address of an employee in its database violates which GDPR data processing principle?
17. Q17 VideoCorp is a data controller that creates online video games. VideoCorp is concerned about the loss of market share as a result…
18. Q18 A company director decides to boost company morale by creating a video greeting card. The director obtains employees' consent to participate in…
19. Q19 A doctor that allows the free access of his patients' health data on the web violates which provision of the GDPR?
20. Q20 People’s Bank is established in France but also has offices in Ireland, Germany, Sweden, and Portugal. The bank has a privacy notice…
21. Q21 According to the GDPR, can an employer refuse to grant a former employee access to all their emails and IT logs?
22. Q22 VideoCorp is a data controller that creates online video games. VideoCorp is concerned about the loss of market share as a result…
23. Q23 Great Work LLC is a regional EU company with 200,000 employees.    Great Work LLC recently implemented a new software, the Internet access…
24. Q24 A university decided to allow students to sit for their examinations using videoconferencing. Students were required to identify themselves using an ID.…
25. Q25 A marketing company distributes direct marketing communications to its customers via email. The email address of customers is shared with the company's…

More IAPP certifications

Artificial Intelligence Governance Professional AIGP 42 questions