Free IAPP CIPP-E Exam Questions

Become IAPP Certified with updated CIPP-E exam questions and correct answers

Page: 1 / 64

Total 320 Questions | Updated On: Jan 12, 2026

Add To Cart

Question 1

Which of the following does NOT have to be included in the records most processors must maintain in relation to their data processing activities?

A : me and contact details of each controller on behalf of which the processor is acting

B : tegories of processing carried out on behalf of each controller for which the processor is acting.

C : tails of transfers of personal data to a third country carried out on behalf of each controller for which the processor is acting.

D : tails of any data protection impact assessment conducted in relation to any processing activities carried out by the processor on behalf of each controller for which the processor is acting.

Answer: C

Question 2

To receive a preliminary interpretation on provisions of the GDPR, a national court will refer its case to which of the following?

A : The Court of Justice of the European Union.

B : The European Data Protection Supervisor.

C : The European Court of Human Rights.

D : The European Data Protection Board.

Answer: A

Question 3

Under the GDPR, which of the following is true in regard to adequacy decisions involving cross-border transfers?

A : European Commission can adopt an adequacy decision for individual companies.

B : European Commission can adopt, repeal or amend an existing adequacy decision.

C : member states are vested with the power to accept or reject a European Commission adequacy decision.

D : be considered as adequate, third countries must implement the EU General Data Protection Regulation into their national legislation.

Answer: A

Question 4

The European Parliament jointly exercises legislative and budgetary functions with which of the following?

A : European Commission

B : Article 29 Working Party.

C : Council of the European Union

D : European Data Protection Board.

Answer: C

Question 5

Many businesses print their employees' photographs on building passes, so that employees can be identified by security staff. This is notwithstanding the fact that facial images potentially qualify as biometric data under the GOPR. Why would such practice be permitted?

A : cause use of biometric data to confirm the unique identification of data subjects benefits from an exemption.

B : Because photographs qualify as biometric data only when they undergo a "specific technical processing".

C : cause employees are deemed to have given their explicit consent when they agree to be photographed by their employer.

D : cause photographic ID is a physical security measure which is "necessary for reasons of substantial public interest".

Answer: B

Page: 1 / 64

Total 320 Questions | Updated On: Jan 12, 2026

Add To Cart