IAPP CIPP-A Online Practice Questions and Exam Preparation

IAPP CIPP-A Online Questions & Answers

• Question 11:

  In India's IT Rules 2011, which is included in the definition of "sensitive personal data"?

  A. Tax records.
  B. IP addresses.
  C. Next of kin.
  D. Sexual Orientation.
  D. Sexual Orientation.

• Question 12:

  In what case would a foreign company NOT be liable for breaches of Singapore's PDPA?

  A. If it has a physical office in Singapore.
  B. If it is storing information in Singapore.
  C. If it is collecting personal information in Singapore.
  D. If it collects information from Singaporeans living abroad.
  D. If it collects information from Singaporeans living abroad.

• Question 13:

  Which provision of Hong Kong's Personal Data (Privacy) Ordinance (PDPO) strengthens the purpose limitation principle (DPP3)?

  A. Notice; because the data subject must be provided with the purpose of the collection.
  B. Public domain; because the data subjects must agree to the purpose before their information is made publicly available.
  C. Prescribed consent; because the data subject must give express consent to their personal information being used for additional purposes.
  D. Finality; because the purpose for collection of personal information from the subject must be directly related to a function of the collector.
  A. Notice; because the data subject must be provided with the purpose of the collection.

• Question 14:

  The judgement of the Supreme Court in 2017 in the case of Justice K.S. Puttaswamy (retd.) and Anr. vs. Union of India held that?

  A. Right to Privacy is a fundamental right guaranteed by the Constitution.
  B. Right to Privacy is an intrinsic part of Art. 21 of the Constitution.
  C. Right to life and personal liberty includes the right to Privacy.
  D. Right to Privacy is the right to be left alone.
  A. Right to Privacy is a fundamental right guaranteed by the Constitution.

• Question 15:

  Which was NOT listed as an individual right in the 1998 Fair Information Practice Principles (FIPPs)?

  A. Notice.
  B. Choice.
  C. Right to erasure.
  D. Right to data access.
  B. Choice.

• Question 16:

  Which personal data element is NOT considered a special category of data under the General Data Protection Regulation (GDPR)?

  A. Physical or mental health data.
  B. Financial information.
  C. Race or ethnic origin.
  D. Political opinions.
  B. Financial information.

  ---

  Explanation/Reference:

  The personal data element that is NOT considered a special category of data under the General Data Protection Regulation (GDPR) is B. Financial information.

  The GDPR identifies "special categories" of personal data that require additional protection due to their sensitive nature. These categories include physical or mental health data, race or ethnic origin, and political opinions, among others. However, financial information is not classified as a special category of data under the GDPR. Nonetheless, it is still subject to the GDPR's general principles and protections for personal data.

• Question 17:

  What was the basis for the "TrustSg" mark, which was designed to build confidence in e-commerce transactions before the PDPA was enacted?

  A. The Fair Information Practice Principles.
  B. The Model Data Protection Code.
  C. The Electronic Transactions Act.
  D. The 1995 European Directive.
  B. The Model Data Protection Code.

• Question 18:

  Which of the following principles of the OECD guidelines and Council of European Convention principles does Singapore's PDPA incorporate?

  A. Disclosures to third parties included in access requests.
  B. Additional protections for sensitive personal data.
  C. The ability to opt-out from direct marketing.
  D. The right of deletion of data on request.
  C. The ability to opt-out from direct marketing.

• Question 19:

  SCENARIO A. No, because Jimmy is not in the division that Bigbank seeks to acquire.
  B. No, because the data was collected for the express purpose of complying with Singabank's privacy policies.
  C. Yes, if Singabank informs Jimmy of the disclosure of his personal data before it occurs.
  D. Yes, if Jimmy's personal data is necessary for Bigbank to determine whether to proceed with the acquisition.

  C. Yes, if Singabank informs Jimmy of the disclosure of his personal data before it occurs.

  ---

  Explanation/Reference:

• Question 20:

  All of the following are exempt from Section 43A of India's IT Rules 2011 EXCEPT?

  A. Charitable groups.
  B. Sole proprietorships.
  C. Government agencies.
  D. Religious organizations.
  C. Government agencies.