Free CIPP-C Practice Exam Questions Online

Why IAPP CIPP-C Practice Exam Questions?

Ready to level up your IAPP CIPP-C exam study? Just TheExamsLab CIPP-C practice tests free.

CIPP-C exam questions are expertly crafted practice tests designed to simulate the real IAPP certification exam environment and help you assess your knowledge and figure out where you are lacking. From our free Certified Information Privacy Professional/ Canada (CIPP/C) CIPP-C practice exam, you will feel secure in passing any question type or time limit. TheExamsLab offers the CIPP-C exam questions 2024. Don’t settle or do it half-heartedly get the best and invest in the best what you want is what you get.

Page: 1 / 31

Total 152 Questions | Updated On: Nov 21, 2024

Add To Cart

Question 1

SCENARIO

Please use the following to answer the next QUESTION:

A US-based startup company is selling a new gaming application. One day, the CEO of the company receives

an urgent letter from a prominent EU-based retail partner. Triggered by an unresolved complaint lodged by an

EU resident, the letter describes an ongoing investigation by a supervisory authority into the retailer’s data

handling practices.

The complainant accuses the retailer of improperly disclosing her personal data, without consent, to parties in

the United States. Further, the complainant accuses the EU-based retailer of failing to respond to her

withdrawal of consent and request for erasure of her personal data. Your organization, the US-based startup

company, was never informed of this request for erasure by the EU-based retail partner. The supervisory

authority investigating the complaint has threatened the suspension of data flows if the parties involved do not

cooperate with the investigation. The letter closes with an urgent request: “Please act immediately by

identifying all personal data received from our company.”

This is an important partnership. Company executives know that its biggest fans come from Western Europe;

and this retailer is primarily responsible for the startup’s rapid market penetration.

As the Company’s data privacy leader, you are sensitive to the criticality of the relationship with the retailer.

Upon review, the data privacy leader discovers that the Company’s documented data inventory is obsolete.

What is the data privacy leader’s next best source of information to aid the investigation?

A : Reports on recent purchase histories

B : Database schemas held by the retailer

C : Lists of all customers, sorted by country

D : Interviews with key marketing personnel

Answer: C

Question 2

Which of the following is an important implication of the Dodd-Frank Wall Street Reform and Consumer

Protection Act?

A : Financial institutions must avoid collecting a customer’s sensitive personal information

B : Financial institutions must help ensure a customer’s understanding of products and services

C : Financial institutions must use a prescribed level of encryption for most types of customer records

D : Financial institutions must cease sending e-mails and other forms of advertising to customers who opt out of direct marketing

Answer: B

Question 3

Which of the following types of information would an organization generally NOT be required to disclose to

law enforcement?

A : Information about medication errors under the Food, Drug and Cosmetic Act

B : Money laundering information under the Bank Secrecy Act of 1970

C : Information about workspace injuries under OSHA requirements

D : Personal health information under the HIPAA Privacy Rule

Answer: D

Question 4

Which entities must comply with the Telemarketing Sales Rule?

A : For-profit organizations and for-profit telefunders regarding charitable solicitations

B : Nonprofit organizations calling on their own behalf

C : For-profit organizations calling businesses when a binding contract exists between them

D : For-profit and not-for-profit organizations when selling additional services to establish customers

Answer: D

Question 5

Acme Student Loan Company has developed an artificial intelligence algorithm that determines whether an

individual is likely to pay their bill or default. A person who is determined by the algorithm to be more likely

to default will receive frequent payment reminder calls, while those who are less likely to default will not

receive payment reminders.

Which of the following most accurately reflects the privacy concerns with Acme Student Loan Company using

artificial intelligence in this manner?

A : If the algorithm uses risk factors that impact the automatic decision engine. Acme must ensure that thealgorithm does not have a disparate impact on protected classes in the output.

B : If the algorithm makes automated decisions based on risk factors and public information, Acme need notdetermine if the algorithm has a disparate impact on protected classes.

C : If the algorithm’s methodology is disclosed to consumers, then it is acceptable for Acme to have adisparate impact on protected classes.

D : If the algorithm uses information about protected classes to make automated decisions, Acme mustensure that the algorithm does not have a disparate impact on protected classes in the output.

Answer: B

Page: 1 / 31

Total 152 Questions | Updated On: Nov 21, 2024

Add To Cart