Exam Details

  • Exam Code
    :CIPP-A
  • Exam Name
    :Certified Information Privacy Professional/Asia (CIPP/A)
  • Certification
    :IAPP Certifications
  • Vendor
    :IAPP
  • Total Questions
    :93 Q&As
  • Last Updated
    :May 21, 2025

IAPP IAPP Certifications CIPP-A Questions & Answers

  • Question 11:

    Which of the following is NOT a substantial source of privacy protection for Hong Kong citizens?

    A. The Communications and Surveillance Ordinance.

    B. The Universal Declaration of Human Rights.

    C. The Bill of Rights Ordinance.

    D. The Basic Law.

  • Question 12:

    Which Hong Kong body has recommended legislation that provides for the right of civil action to be taken when private information is publicly disclosed?

    A. Hong Kong's Court of Final Appeal.

    B. Hong Kong Law Reform Commission.

    C. Office of the Privacy Commissioner for Personal Data.

    D. Standing Committee of the National People's Congress of the PRC.

  • Question 13:

    Which provision of Hong Kong's Personal Data (Privacy) Ordinance (PDPO) strengthens the purpose limitation principle (DPP3)?

    A. Notice; because the data subject must be provided with the purpose of the collection.

    B. Public domain; because the data subjects must agree to the purpose before their information is made publicly available.

    C. Prescribed consent; because the data subject must give express consent to their personal information being used for additional purposes.

    D. Finality; because the purpose for collection of personal information from the subject must be directly related to a function of the collector.

  • Question 14:

    Based on the model contract released by the Privacy Commissioner for Personal Data (PDPC), Hong Kong, all of the following sections are recommended to be put into a contract to address Ordinance 33 (Data transfer/export) of Hong Kong's Personal Data Privacy Ordinance (PDPO) EXCEPT?

    A. Liability and indemnity.

    B. Exemptions and Definitions.

    C. Termination of the contract.

    D. Obligations of the Transferee.

    E. None of the above.

  • Question 15:

    In 2015, Section 66A of India's IT Act was ruled unconstitutional.

    What did this section previously prohibit?

    A. Publishing images with sexually explicit content.

    B. Tampering with computer source documents.

    C. Publishing private images of others.

    D. Sending offensive messages.

  • Question 16:

    What clarification did India make in a 2011 Press Note regarding their Sensitive Personal Data Rules?

    A. That the rules apply to data subjects located outside of India.

    B. That the rules apply to persons or companies collecting sensitive data within India.

    C. That the data processor must provide notice to the data subject before data is processed.

    D. That sensitive personal data or information includes passwords, financial information, medical records, and biometric information.

  • Question 17:

    Although the right to privacy is not explicitly granted in the Indian Constitution, privacy advocates frequently cite Article 21's guarantee of?

    A. Personal liberty.

    B. Right to property.

    C. Equality before the law.

    D. Freedom from intrusion.

  • Question 18:

    Which method ensures the greatest security when erasing data that is no longer needed, according to the Hong Kong Office of the Privacy Commissioner?

    A. Strip-shredding paper copies of data.

    B. Crosscut shredding paper copies of data.

    C. Deleting electronic files containing data.

    D. Reformatting USB memory devices containing data.

  • Question 19:

    In Hong Kong, which of the following are exempt from personal data access requests until after the project to which the data is related has been concluded?

    A. Hospital administrators.

    B. Financial institutions.

    C. News organizations.

    D. Non-profit groups.

  • Question 20:

    Under the PDPO, what are Hong Kong companies that make use of personal data required to do?

    A. Appoint an official compliance officer.

    B. Register with the appropriate data authority.

    C. Honor all data subject requests for correcting personal information.

    D. Provide contact information of persons handling data access requests.

Tips on How to Prepare for the Exams

Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only IAPP exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your CIPP-A exam preparations and IAPP certification application, do not hesitate to visit our Vcedump.com to find your solutions here.