IAPP IAPP Certifications CIPP-A Questions & Answers

• Question 51:

  What benefit does making data pseudonymous offer to data controllers?

  A. It ensures that it is impossible to re-identify the data.

  B. It eliminates the responsibility to report data breaches.

  C. It allows for further use of the data for research purposes.

  D. It eliminates the need for a policy specifying data subject access rights.

  Correct Answer: A

• Question 52:

  How is the transparency of the complaint process treated in both Hong Kong and Singapore?

  A. A complainant must alert all individuals potentially affected by the complaint.

  B. Investigations into complaints in Hong Kong and Singapore are open to the public.

  C. The Hong Kong and Singapore Commissioner may require the complainants to identify themselves before carrying out any investigation into the complaint.

  D. The Hong Kong and Singapore commissioners are obliged to start investigations when receiving a complaint and inform the respondent of the personal details of the complainant.

  Correct Answer: C

• Question 53:

  SCENARIO

  Correct Answer: A

• Question 54:

  How was the Supreme Court's ruling in the Maneka Gandhi v Union of India case significant to Indian law?

  A. It expanded the interpretation of right to life under Article 21 of the Constitution.

  B. It established that privacy is a fundamental right granted by the Constitution under Article 21.

  C. It upheld that the impounding of passports for "public interest" is allowable under Section 10(3)(c) of the Passports Act.

  D. It ruled that under Article 32 of the Constitution individuals may file writ petitions when they feel their rights were violated.

  Correct Answer: D

• Question 55:

  Which of the following entities do NOT fall under India's Right to Information Act of 2005?

  A. High courts.

  B. State legislatures.

  C. Law enforcement agencies.

  D. National Security Guard.

  Correct Answer: D

• Question 56:

  In India, the obligation to appoint a Grievance Officer applies ONLY to companies that?

  A. Deal with sensitive personal data.

  B. Conduct cross-border data transfers.

  C. Are considered part of the public sector.

  D. Lack alternate enforcement mechanisms.

  Correct Answer: A

• Question 57:

  Section 43A of India's IT Rules 2011 requires which of the following for a privacy policy?

  A. It should be available and produced on request.

  B. It should be published on the website of the body corporate.

  C. It should be emailed or faxed to data providers by the body corporate.

  D. It should be shown to the data provider at the time of data collection.

  Correct Answer: A

• Question 58:

  In Hong Kong's revised Breach Guidance Note of 2015, what course of action did the Commissioner recommend that companies take immediately after experiencing a breach?

  A. Proceed under the assumption that the breach is a threat to personal safety.

  B. Enlist the aid of law enforcement to determine the cause of the breach.

  C. Quickly issue a notification to the data subjects affected by the breach.

  D. Immediately gather essential information in relation to the breach.

  Correct Answer: D

  The Commissioner of Hong Kong recommended that companies take the course of action of immediately gathering essential information in relation to the breach, as stated in the revised Breach Guidance Note of 2015. This would include investigating the cause and extent of the breach, identifying the types of personal data involved, and assessing the potential harm to affected individuals. Once this information has been gathered, companies can then determine whether they need to notify affected individuals and take any other necessary steps to mitigate the impact of the breach. Therefore, the correct option is D.

• Question 59:

  SCENARIO

  Correct Answer: B

• Question 60:

  SCENARIO

  Correct Answer: C