IAPP CIPP-A CIPPA Practice Questions| TestInsights

Question 1

Under the General Data Protection Regulation (GDPR), European Union member states may be allowed to transfer personal data to the United States in some cases.

Which of the following could NOT be used as a legitimate means of doing this?

AA consent derogation.

BA certification mechanism.

CThe Safe Harbor Framework.

DBinding Corporate Rules (BCR).

Correct : C

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

AA consent derogation.

BA certification mechanism.

CThe Safe Harbor Framework.

DBinding Corporate Rules (BCR).

Question 2

In Hong Kong, which of the following are exempt from personal data access requests until after the project to which the data is related has been concluded?

AHospital administrators.

BFinancial institutions.

CNews organizations.

DNon-profit groups.

Correct : C

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

AHospital administrators.

BFinancial institutions.

CNews organizations.

DNon-profit groups.

Question 3

Which provision of Hong Kong's Personal Data (Privacy) Ordinance (PDPO) strengthens the purpose limitation principle (DPP3)?

ANotice; because the data subject must be provided with the purpose of the collection.

BPublic domain; because the data subjects must agree to the purpose before their information is made publicly available.

CPrescribed consent; because the data subject must give express consent to their personal information being used for additional purposes.

DFinality; because the purpose for collection of personal information from the subject must be directly related to a function of the collector.

Correct : A

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

ANotice; because the data subject must be provided with the purpose of the collection.

BPublic domain; because the data subjects must agree to the purpose before their information is made publicly available.

CPrescribed consent; because the data subject must give express consent to their personal information being used for additional purposes.

DFinality; because the purpose for collection of personal information from the subject must be directly related to a function of the collector.

Question 4

Based on the model contract released by the Privacy Commissioner for Personal Data (PDPC), Hong Kong, all of the following sections are recommended to be put into a contract to address Ordinance 33 (Data transfer/export) of Hong Kong's Personal Data Privacy Ordinance (PDPO) EXCEPT?

ALiability and indemnity.

BExemptions and Definitions.

CTermination of the contract.

DObligations of the Transferee.

Correct : A

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

ALiability and indemnity.

BExemptions and Definitions.

CTermination of the contract.

DObligations of the Transferee.

Question 5

Section 43A was amended by India's IT Rules 2011 to include?

AA definition of what constitutes reasonable security practices.

BA requirement for the creation of a data protection authority.

CA list of cases in which privacy policies are not necessary.

DA clarification regarding the role of non-automated data.

Correct : A

https://tahseen.ae/media/3481/india_information-technology-reasonable-security-practices-and- procedures-and-sensitive-personal-data-or-information-rules-2011.pdf

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

AA definition of what constitutes reasonable security practices.

BA requirement for the creation of a data protection authority.

CA list of cases in which privacy policies are not necessary.

DA clarification regarding the role of non-automated data.

Curious about Actual IAPP Certified Information Privacy Professional (CIPP-A) Exam Questions?

Options Selected by Other Users:

Options Selected by Other Users:

Options Selected by Other Users:

Options Selected by Other Users:

Options Selected by Other Users: