CIPP/E EXAM CERTIFIED INFORMATION
PRIVACY PROFESSIONAL/EUROPE EXAM
QUESTIONS AND CORRECT ANSWERS |
ALREADY GRADED A+ | VERIFIED
ANSWERS | JUST RELEASED
In which of the following situations would an individual most likely
to be able to withdraw her consent for processing?
(A). When she is leaving her bank and moving to another bank.
(B). When she has recently changed jobs and no longer works for
the same company.
(C). When she disagrees with a diagnosis her doctor has
recorded on her records.
(D). When she no longer wishes to be sent marketing materials
from an organization. ------CORRECT ANSWER---------------D).
When she no longer wishes to be sent marketing materials from
an organization.
WP29's "Guidelines on Personal data breach notification under
Regulation 2016/679''
provides examples of ways to communicate data breaches
transparently. Which of the following was
listed as a method that would NOT be effective for communicating
a breach to data subjects?
(A). A postal notification
(B). A direct electronic message
(C). A notice on a corporate blog
,(D). A prominent advertisement in print media ------CORRECT
ANSWER---------------C). A notice on a corporate blog
Which judicial body makes decisions on actions taken by
individuals wishing to enforce their
rights under EU law?
A). Court of Auditors
(B). Court of Justice of European Union
(C). European Court of Human Rights
(D). European Data Protection Board ------CORRECT ANSWER--
-------------B). Court of Justice of European Union
If a data subject puts a complaint before a DPA and receives no
information about its
progress or outcome, how long does the data subject have to wait
before taking action in the courts?
Under the GDPR, which essential pieces of information must be
provided to data subjects
before collecting their personal data?
,(A). The authority by which the controller is collecting the data and
the third parties to whom the
data will be sent.
(B). The name/s of relevant government agencies involved and
the steps needed for revising the
data.
(C). The identity and contact details of the controller and the
reasons the data is being collected.
(D). The contact information of the controller and a description of
the retention policy. ------CORRECT ANSWER---------------C). The
identity and contact details of the controller and the reasons the
data is being collected.
To receive a preliminary interpretation on provisions of the GDPR,
a national court will refer
its case to which of the following?
(A). The Court of Justice of the European Union.
(B). The European Data Protection Supervisor.
(C). The European Court of Human Rights.
(D). The European Data Protection Board. ------CORRECT
ANSWER---------------A). The Court of Justice of the European
Union.
What is the consequence if a processor makes an independent
decision regarding the
purposes and means of processing it carries out on behalf of a
controller?
(A). The controller will be liable to pay an administrative fine
, (B). The processor will be liable to pay compensation to affected
data subjects
(C). The processor will be considered to be a controller in respect
of the processing concerned
(D). The controller will be required to demonstrate that the
unauthorized processing negatively
affected one or more of the parties involved ------CORRECT
ANSWER---------------B). The processor will be liable to pay
compensation to affected data subjects
In which case would a controller who has undertaken a DPIA
most likely need to consult with
a supervisory authority?
(A). Where the DPIA identifies that personal data needs to be
transferred to other countries outside
of the EEA.
(B). Where the DPIA identifies high risks to individuals' rights and
freedoms that the controller can
take steps to reduce.
(C). Where the DPIA identifies that the processing being
proposed collects the sensitive data of EU
citizens.
(D). Where the DPIA identifies risks that will require insurance for
protecting its business interests. ------CORRECT ANSWER---------
------B). Where the DPIA identifies high risks to individuals' rights
and freedoms that the controller can take steps to reduce
With the issue of consent, the GDPR allows member states some
choice regarding what?
The benefits of buying summaries with Stuvia:
Guaranteed quality through customer reviews
Stuvia customers have reviewed more than 700,000 summaries. This how you know that you are buying the best documents.
Quick and easy check-out
You can quickly pay through credit card or Stuvia-credit for the summaries. There is no membership needed.
Focus on what matters
Your fellow students write the study notes themselves, which is why the documents are always reliable and up-to-date. This ensures you quickly get to the core!
Frequently asked questions
What do I get when I buy this document?
You get a PDF, available immediately after your purchase. The purchased document is accessible anytime, anywhere and indefinitely through your profile.
Satisfaction guarantee: how does it work?
Our satisfaction guarantee ensures that you always find a study document that suits you well. You fill out a form, and our customer service team takes care of the rest.
Who am I buying these notes from?
Stuvia is a marketplace, so you are not buying this document from us, but from seller StudyWay. Stuvia facilitates payment to the seller.
Will I be stuck with a subscription?
No, you only buy these notes for $24.99. You're not tied to anything after your purchase.
