IAPP IAPP Certifications CIPP-A Questions & Answers

• Question 91:

  In the Asia-Pacific Economic Cooperation (APEC) Privacy Framework, what exception is allowed to the Access and Correction principle?

  A. Paper-based records.

  B. Publicly-available information.

  C. Foreign intelligence.

  D. Unreasonable expense.

  Correct Answer: D

  D. Unreasonable expense. The APEC Privacy Framework's Access and Correction principle allows for exceptions when providing access to personal information or making corrections would impose an unreasonable burden or expense on the organization. In such cases, organizations may deny or limit access or correction, provided they can justify the decision as necessary and reasonable.

• Question 92:

  How can the privacy principles issued in 1980 by the Organisation for Economic Cooperation and Development (OECD) be defined?

  A. Guidelines governing the protection of privacy and trans-border data flows issued in collaboration with the Federal Trade Commission.

  B. Guidelines governing the protection of privacy and trans-border data flows of personal data in states that are members.

  C. Mandatory rules governing the protection of privacy and trans-border data flows within the European Union.

  D. Mandatory rules governing the protection of privacy and trans-border data flows among binding member states.

  Correct Answer: B

• Question 93:

  Which concept is NOT an element of Cross Border Privacy Rules (CBPR)?

  A. Enforcement by Accountability Agents.

  B. Self-assessment against CBPR questionnaire.

  C. Consultation with Privacy Enforcement (PE) Authority.

  D. Dispute resolution via the Accountability Agent's compliance program.

  E. None of above.

  Correct Answer: E

  None of the concepts listed are outside the scope of Cross Border Privacy Rules (CBPR). All of the options listed are key elements of the CBPR framework.

  Enforcement by Accountability Agents, Self-assessment against CBPR questionnaire, Consultation with Privacy Enforcement (PE) Authority, and Dispute resolution via the Accountability Agent's compliance program are all important components of the CBPR framework, which is designed to facilitate international data flows while ensuring the protection of personal information.