PrepAway - Latest Free Exam Questions & Answers

Category: IAPP CIPP/E

Exam IAPP CIPP/E: Certified Information Privacy Professional/Europe (CIPP/E)

Under what circumstances would the GDPR apply to personal data that exists in physical form, such as informati

Under what circumstances would the GDPR apply to personal data that exists in physical form, such as information contained in notebooks or hard copy files? A. Only where the personal data is produced as a physical output of specific automated processing activities, such as printing, labelling, or stamping. B. Only where the personal data is […]

How is the retention of communications traffic data for law enforcement purposes addressed by European data pr

How is the retention of communications traffic data for law enforcement purposes addressed by European data protection law? A. The ePrivacy Directive allows individual EU member states to engage in such data retention. B. The ePrivacy Directive harmonizes EU member states’ rules concerning such data retention. C. The Data Retention Directive’s annulment makes such data […]

Which aspect of the GDPR will likely have the most impact on the consistent implementation of data protection

Which aspect of the GDPR will likely have the most impact on the consistent implementation of data protection laws throughout the European Union? A. That it essentially functions as a one-stop shop mechanism B. That it takes the form of a Regulation as opposed to a Directive C. That it makes notification of large-scale data […]

What is true of both the General Data Protection Regulation (GDPR) and the Council of Europe Convention 108?

What is true of both the General Data Protection Regulation (GDPR) and the Council of Europe Convention 108? A. Both govern international transfers of personal data B. Both govern the manual processing of personal data C. Both only apply to European Union countries D. Both require notification of processing activities to a supervisory authority Reference: […]

Which institution has the power to adopt findings that confirm the adequacy of the data protection level in a

Which institution has the power to adopt findings that confirm the adequacy of the data protection level in a non-EU country? A. The European Parliament B. The European Commission C. The Article 29 Working Party D. The European Council Reference: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en

Before Anna determines whether Frank’s performance database is permissible, what additional information does

Before Anna determines whether Frank’s performance database is permissible, what additional information does she need? A. More information about Frank’s data protection training. B. More information about the extent of the information loss. C. More information about the algorithm Frank used to mask student numbers. D. More information about what students have been told and […]

Which of the University’s records does Anna NOT have to include in her record of processing activities?

SCENARIO Please use the following to answer the next question: Anna and Frank both work at Granchester University. Anna is a lawyer responsible for data protection, while Frank is a lecturer in the engineering department. The University maintains a number of types of records: • Student records, including names, student numbers, home addresses, pre-university information, […]

What is an important difference between the European Court of Human Rights (ECHR) and the Court of Justice of

What is an important difference between the European Court of Human Rights (ECHR) and the Court of Justice of the European Union (CJEU) in relation to their roles and functions? A. ECHR can rule on issues concerning privacy as a fundamental right, while the CJEU cannot. B. CJEU can force national governments to implement and […]


Page 1 of 212