Free IAPP CIPP-E Exam Questions

Become IAPP Certified with updated CIPP-E exam questions and correct answers

Page: 1 / 64

Total 320 Questions | Updated On: Dec 05, 2025

Add To Cart

Question 1

Which of the following demonstrates compliance with the accountability principle found in Article 5, Section 2 of the GDPR?

A : Anonymizing special categories of data.

B : nducting regular audits of the data protection program.

C : tting consent from the data subject for a cross border data transfer.

D : crypting data in transit and at rest using strong encryption algorithms.

Answer: B

Question 2

Under Article 9 of the GDPR, which of the following categories of data is NOT expressly prohibited from data processing?

A : rsonal data revealing ethnic origin.

B : rsonal data revealing genetic information.

C : rsonal data revealing financial information.

D : Personal data revealing trade union membership.

Answer: C

Question 3

A company wishes to transfer personal data to a country outside of the European Union/EEA In order to do so, they are planning an assessment of the country's laws and practices, knowing that these may impinge upon the transfer safeguards they intend to use

All of the following factors would be relevant for the company to consider EXCEPT'?

A : y onward transfers, such as transfers of personal data to a sub-processor in the same or another third country.

B : process of modernization in the third country concerned and their access to emerging technologies that rely on international transfers of personal data

C : technical, financial, and staff resources available to an authority m the third country concerned that may access the personal data to be transferred

D : contractual clauses between the data controller or processor established in the European Union/EEA and the recipient of the transfer established in the third country concerned

Answer: B

Question 4

What is an important difference between the European Court of Human Rights (ECHR) and the Court of Justice of the European Union (CJEU) in relation to their roles and functions?

A : HR can rule on issues concerning privacy as a fundamental right, while the CJEU cannot.

B : EU can force national governments to implement and honor EU law, while the ECHR cannot.

C : EU can hear appeals on human rights decisions made by national courts, while the ECHR cannot.

D : HR can enforce human rights laws against governments that fail to implement them, while the CJEU cannot.

Answer: B

Question 5

In which scenario is a Controller most likely required to undertake a Data Protection Impact Assessment?

A : en the controller is collecting email addresses from individuals via an online registration form for marketing purposes.

B : en personal data is being collected and combined with other personal data to profile the creditworthiness of individuals.

C : en the controller is required to have a Data Protection Officer.

D : en personal data is being transferred outside of the EEA.

Answer: B

Page: 1 / 64

Total 320 Questions | Updated On: Dec 05, 2025

Add To Cart