CIPP-A Online Practice Questions and Answers
Which jurisdiction was the first to consider IP addresses to be personal information?
A. India.
B. Hong Kong.
C. The United States.
D. The European Union.
Hong Kong's definition of a data user in the original PDPO applies to all of the following EXCEPT?
A. Trust corporations.
B. Third-party processors.
C. Private sector organizations.
D. Limited liability partnerships.
The "due diligence" exemption in Hong Kong's PDPO was meant to apply to?
A. Third-party data processors located in foreign countries.
B. Companies researching the viability of business mergers.
C. Service providers hosting customer information in the cloud.
D. Direct marketers acting in the best interest of their company.
Under the General Data Protection Regulation (GDPR), European Union member states may be allowed to transfer personal data to the United States in some cases.
Which of the following could NOT be used as a legitimate means of doing this?
A. A consent derogation.
B. A certification mechanism.
C. Privacy Shield.
D. Ad-hoc contractual clauses.
Which personal data element is NOT considered a special category of data under the General Data Protection Regulation (GDPR)?
A. Physical or mental health data.
B. Financial information.
C. Race or ethnic origin.
D. Political opinions.
What emerged as the main reason for creating a comprehensive data protection law when Singapore ministers met between 2005 and 2011?
A. To control increasing technological threats.
B. To raise Singapore's human rights standing.
C. To limit the scope of governmental surveillance.
D. To enhance Singapore's economic competitiveness.
In Singapore, a potential employer can collect all of the following data on an individual in the pre-employment phase EXCEPT?
A. Postings from social media websites.
B. Information from a background check.
C. Information about the individual's children.
D. The individual's university attendance records.
According to India's IT Rules 2011, a body corporate operating in India is required to appoint what kind of authority?
A. A Chief Risk Officer.
B. A Grievance Officer.
C. A Data Protection Officer.
D. A Chief Technology Officer.