IAPP IAPP Certifications CIPP-A Questions & Answers

• Question 31:

  Under India's IT Rules 2011, data subjects have the right to correct inaccuracies in personal information collected about them only if?

  A. They are also the providers of the information.

  B. They confirm their consent to maintain the information.

  C. They are able to prove the legitimacy of the corrections.

  D. They request the corrections within a specified amount of time.

  Correct Answer: A

• Question 32:

  Which was NOT listed as an individual right in the 1998 Fair Information Practice Principles (FIPPs)?

  A. Notice.

  B. Choice.

  C. Right to erasure.

  D. Right to data access.

  Correct Answer: B

• Question 33:

  Which of the following countries will continue to enjoy adequacy status under the GDPR, pending any future European Commission decision to the contrary?

  A. Argentina.

  B. Mexico.

  C. Taiwan.

  D. Korea.

  Correct Answer: A

• Question 34:

  Under the General Data Protection Regulation (GDPR), European Union member states may be allowed to transfer personal data to the United States in some cases.

  Which of the following could NOT be used as a legitimate means of doing this?

  A. A consent derogation.

  B. A certification mechanism.

  C. Privacy Shield.

  D. Ad-hoc contractual clauses.

  Correct Answer: C

• Question 35:

  Which personal data element is NOT considered a special category of data under the General Data Protection Regulation (GDPR)?

  A. Physical or mental health data.

  B. Financial information.

  C. Race or ethnic origin.

  D. Political opinions.

  Correct Answer: B

  The personal data element that is NOT considered a special category of data under the General Data Protection Regulation (GDPR) is B. Financial information.

  The GDPR identifies "special categories" of personal data that require additional protection due to their sensitive nature. These categories include physical or mental health data, race or ethnic origin, and political opinions, among others. However, financial information is not classified as a special category of data under the GDPR. Nonetheless, it is still subject to the GDPR's general principles and protections for personal data.

• Question 36:

  SCENARIO

  Correct Answer: A

• Question 37:

  SCENARIO

  Correct Answer: A

• Question 38:

  SCENARIO

  Correct Answer: D

• Question 39:

  How are the scope of Singapore's Personal Data Protection Act and the scope of India's IT Rules similar?

  A. They only apply to the private sector.

  B. They allow exemptions for military personnel.

  C. They apply to controllers and processors alike.

  D. They impose obligations on individuals acting in a domestic capacity.

  Correct Answer: C

• Question 40:

  Both Sections 72 and 72A of India's IT Act 2000 involve unauthorized access of personal information.

  One main difference between the sections is that 72A does what?

  A. Stipulates that disclosure has to have occurred.

  B. Specifies imprisonment as a possible penalty.

  C. Adds a provision about wrongful loss or gain.

  D. Includes the concept of consent.

  Correct Answer: B