IAPP CIPP-C Online Practice Questions and Exam Preparation

IAPP CIPP-C Online Questions & Answers

• Question 21:

  The process of de-identification where new data elements are substituted for identifying information is?

  A. Shuffling.
  B. Encryption.
  C. Anonymization.
  D. Pseudonymization.
  D. Pseudonymization.

• Question 22:

  Which entities must comply with the Telemarketing Sales Rule?

  A. For-profit organizations and for-profit telefunders regarding charitable solicitations
  B. Nonprofit organizations calling on their own behalf
  C. For-profit organizations calling businesses when a binding contract exists between them
  D. For-profit and not-for-profit organizations when selling additional services to establish customers
  D. For-profit and not-for-profit organizations when selling additional services to establish customers

• Question 23:

  Which of the following is commonly required for an entity to be subject to breach notification requirements under most state laws?

  A. The entity must conduct business in the state
  B. The entity must have employees in the state
  C. The entity must be registered in the state
  D. The entity must be an information broker
  A. The entity must conduct business in the state

• Question 24:

  SCENARIO

  Please use the following to answer the next QUESTION:

  Larry has become increasingly dissatisfied with his telemarketing position at SunriseLynx, particularly with his supervisor, Evan. Just last week, Larry overheard Evan mocking the state's Do Not Call list, as well as the people on it. “If they were really serious about not being bothered,” Evan said, “they’d be on the national Do Not Call list. That's the only one we’re required to follow. At SunriseLynx, we call until they ask us not to.”

  Bizarrely, Evan requires telemarketers to keep records of recipients who ask them to call “another time.” To Larry, this is a clear indication that the recipients do not want to be called at all. Evan does not see it that way.

  Larry believes that Evan's arrogance also affects the way he treats employees. Larry believes that the U.S. Constitution protects American workers and that the rights of those at SunriseLynx are violated regularly. At first, Evan seemed friendly, even connecting with employees on social media. However, after reviewing Evan's political posts, it became clear to Larry that employees with similar affiliations were the only ones offered promotions.

  Further, Larry occasionally has packages containing personal-use items mailed to work. Several times, these packages have arrived already opened, even though his name was clearly marked. Larry believes that the opening of personal mail is common at SunriseLynx and that Fourth Amendment rights are being violated under Evan's leadership.

  Larry has also been dismayed to overhear discussions about his coworker, Sadie. Telemarketing calls are regularly recorded for quality assurance, and although Sadie is always professional during business calls, her personal conversations sometimes contain sexual comments. This is something Larry has heard Evan laughing about. When Larry mentioned this to a coworker, his concern was met with a shrug. The coworker believed that employees agreed to be monitored when they were hired. Although

  personal devices are left alone, phone calls, emails, and browsing histories are all subject to surveillance. In fact, Larry knows of one case in which an employee was fired after an undercover investigation by an outside firm uncovered evidence of misconduct. Although the employee may have stolen from the company, Larry believes Evan could have contacted the authorities as soon as he suspected wrongdoing.

  Larry wants to take action but is uncertain how to proceed.

  In what area does Larry have a misconception about private-sector employee rights?

  A. The applicability of federal law
  B. The enforceability of local law
  C. The strict nature of state law
  D. The definition of tort law
  A. The applicability of federal law

• Question 25:

  Which of the following is NOT one of three broad categories of products offered by data brokers, as identified by the U.S. Federal Trade Commission (FTC)?

  A. Research (such as information for understanding consumer trends).
  B. Risk mitigation (such as information that may reduce the risk of fraud).
  C. Location of individuals (such as identifying an individual from partial information).
  D. Marketing (such as appending data to customer information that a marketing company already has).
  C. Location of individuals (such as identifying an individual from partial information).

• Question 26:

  What is a key way that the Gramm-Leach-Bliley Act (GLBA) prevents unauthorized access into a person's back account?

  A. By requiring immediate public disclosure after a suspected security breach.
  B. By requiring the amount of customer personal information printed on paper.
  C. By requiring the financial institutions limit the collection of personal information.
  D. By restricting the disclosure of customer account numbers by financial institutions.
  D. By restricting the disclosure of customer account numbers by financial institutions.

• Question 27:

  A student has left high school and is attending a public postsecondary institution. Under what condition may a school legally disclose educational records to the parents of the student without consent?

  A. If the student has not yet turned 18 years of age
  B. If the student is in danger of academic suspension
  C. If the student is still a dependent for tax purposes
  D. If the student has applied to transfer to another institution
  C. If the student is still a dependent for tax purposes

• Question 28:

  Which organization was the primary influence in the development of Canadian privacy with their publication of a set of eight privacy principles?

  A. The Organization for Economic Co-operation and Development (OECD).
  B. The Canadian Institute of Chartered Accountants (CICA).
  C. The Center for Democracy and Technology (CDT).
  D. The Canadian Standards Association (CSA).
  D. The Canadian Standards Association (CSA).

• Question 29:

  What is the main reason some supporters of the European approach to privacy are skeptical about self- regulation of privacy practices?

  A. A large amount of money may have to be sent on improved technology and security
  B. Industries may not be strict enough in the creation and enforcement of rules
  C. A new business owner may not understand the regulations
  D. Human rights may be disregarded for the sake of privacy
  B. Industries may not be strict enough in the creation and enforcement of rules

• Question 30:

  What is an exception to the Electronic Communications Privacy Act of 1986 ban on interception of wire, oral and electronic communications?

  A. Where one of the parties has given consent
  B. Where state law permits such interception
  C. If an organization intercepts an employee's purely personal call
  D. Only if all parties have given consent
  C. If an organization intercepts an employee's purely personal call