IAPP IAPP Certifications CIPP-A Questions & Answers

• Question 81:

  In which of the following cases would a Singaporean be prevented from accessing information about herself from an organization?

  A. The information was collected in the previous 12 months.

  B. The information is related to an individual's credit rating.

  C. The cost of providing the information proved to be unreasonable.

  D. Any personal information about others has been deleted from the document.

  Correct Answer: B

  In Singapore, individuals generally have the right to access their personal information held by organizations, subject to certain exceptions. However, of the options listed, the only scenario where a Singaporean may be prevented from accessing information about herself is:

  B. The information is related to an individual's credit rating.

  Under the Personal Data Protection Act (PDPA) in Singapore, an organization may refuse an individual's request to access personal data if the data is evaluative, including confidential references provided by the individual or an individual's employer, or if it relates to an individual's creditworthiness, credit standing, credit history or credit rating.

  A. The time frame of 12 months is not relevant to the access rights of individuals in Singapore under the PDPA.

  C. While organizations are allowed to charge a fee for providing access to personal information, the cost of providing the information must be reasonable and cannot be used as a reason to deny access.

  D. If personal information about others has been deleted from a document, the organization should still provide the individual with the relevant information about herself.

• Question 82:

  Which of the following does Singapore's PDPC NOT have the power to do?

  A. Order an organization to stop collecting personal data.

  B. Order an organization to destroy collected personal data.

  C. Order an organization to award compensation to a complainant.

  D. Order an organization to pay a financial penalty to the government.

  Correct Answer: D

• Question 83:

  In the area of human rights, what separates Singapore from many other Asian countries?

  A. It is not a member of the Association of Southeast Asian Nations (ASEAN).

  B. It has not signed the International Covenant on Civil and Political Rights.

  C. It has not adopted the ASEAN Human Rights Declaration.

  D. It is not a member of the United Nations.

  Correct Answer: B

• Question 84:

  Besides the Personal Data Protection Act (PDPA), which of the following is a potential source of privacy protection for Singapore citizens?

  A. Constitutional protections of personal information.

  B. International agreements protecting privacy.

  C. The tort of invasion of privacy.

  D. Breach of confidence law.

  Correct Answer: A

• Question 85:

  Which of the following would NOT be exempt from Singapore's PDPA?

  A. A government automobile registration website.

  B. A private party room at a popular restaurant.

  C. A documentary filmed at a rock concert.

  D. A video from a store's dosed-circuit TV.

  Correct Answer: D

• Question 86:

  SCENARIO

  Correct Answer: B

• Question 87:

  SCENARIO

  Correct Answer: D

  The reason why Good Mining Private's standard form is NOT compliant with Singapore's data protection law is option D, as it asks for details that are not relevant to the job Delilah is applying for. Singapore's Personal Data Protection Act (PDPA) requires that organizations only collect, use, and disclose personal data for purposes that are reasonable and relevant. Asking for information such as emergency contacts, medical history, blood type, and insurance policy is not necessary or relevant to Delilah's job application in the marketing department. Therefore, it is considered excessive collection of personal data, which is a violation of the PDPA. Additionally, the collection and use of Delilah's business card for purposes other than what was explicitly agreed to by Delilah, which was to contact her for coffee, may also be a violation of the PDPA.

• Question 88:

  What personal information is considered sensitive in almost all countries with privacy laws?

  A. Marital status.

  B. Health information.

  C. Employment history.

  D. Criminal convictions.

  Correct Answer: B

• Question 89:

  Which jurisdiction was the first to consider IP addresses to be personal information?

  A. India.

  B. Hong Kong.

  C. The United States.

  D. The European Union.

  Correct Answer: D

• Question 90:

  What term is defined by the European Commission to mean any data that relates to an identified or identifiable individual?

  A. Personally identifiable information.

  B. Sensitive information.

  C. Personal data.

  D. Identified data.

  Correct Answer: C