Free IAPP CIPP-US Exam Questions

Question 1

A company based in United States receives information about its UK subsidiary’s employees in connection with

the centralized HR service it provides.

How can the UK company ensure an adequate level of data protection that would allow the restricted data

transfer to continue?

A : signing up to an approved code of conduct under UK GDPR to demonstrate compliance with its requirements, both for the parent and the subsidiary companies

B : revising the contract with the United States parent company incorporating EU SCCs, as it continues to be valid for restricted transfers under the UK regime

C : By submitting to the ICO a new application for the UK BCRs using the UK BCR application forms, as their existing authorized EU BCRs are not recognized.

D : allowing each employee the option to opt-out to the restricted transfer, as it is necessary to send their names in order to book the sales bonuses.

Answer: B

Question 2

What privacy concept grants a consumer the right to view and correct errors on his or her credit report?

A : cess

B : tice

C : tion

D : oice

Answer: B

Question 3

The Cable Communications Policy Act of 1984 requires which activity?

A : livery of an annual notice detailing how subscriber information is to be used

B : Destruction of personal information a maximum of six months after it is no longer needed

C : tice to subscribers of any investigation involving unauthorized reception of cable services

D : taining subscriber consent for disseminating any personal information necessary to render cable services

Answer: C

Question 4

SCENARIO

Please use the following to answer the next question:

Larry has become increasingly dissatisfied with his telemarketing position at SunriseLynx, and particularly with

his supervisor, Evan. Just last week, he overheard Evan mocking the state’s Do Not Call list, as well as the

people on it. “If they were really serious about not being bothered,” Evan said, “They’d be on the national DNC

list. That’s the only one we’re required to follow. At SunriseLynx, we call until they ask us not to.”

Bizarrely, Evan requires telemarketers to keep records of recipients who ask them to call “another time.” This,

to Larry, is a clear indication that they don’t want to be called at all. Evan doesn’t see it that way.

Larry believes that Evan’s arrogance also affects the way he treats employees. The U.S. Constitution protects

American workers, and Larry believes that the rights of those at SunriseLynx are violated regularly. At first Evan

seemed friendly, even connecting with employees on social media. However, following Evan’s political posts, it

became clear to Larry that employees with similar affiliations were the only ones offered promotions.

Further, Larry occasionally has packages containing personal-use items mailed to work. Several times, these

have come to him already opened, even though this name was clearly marked. Larry thinks the opening of

personal mail is common at SunriseLynx, and that Fourth Amendment rights are being trampled under Evan’s

leadership.

Larry has also been dismayed to overhear discussions about his coworker, Sadie. Telemarketing calls are

regularly recorded for quality assurance, and although Sadie is always professional during business, her

personal conversations sometimes contain sexual comments. This too is something Larry has heard Evan

laughing about. When he mentioned this to a coworker, his concern was met with a shrug. It was the

coworker’s belief that employees agreed to be monitored when they signed on. Although personal devices are

left alone, phone calls, emails and browsing histories are all subject to surveillance. In fact, Larry knows of one

case in which an employee was fired after an undercover investigation by an outside firm turned up evidence of

misconduct. Although the employee may have stolen from the company, Evan could have simply contacted the

authorities when he first suspected something amiss.

Larry wants to take action, but is uncertain how to proceed.

In regard to telemarketing practices, Evan the supervisor has a misconception regarding?

A : conditions under which recipients can opt out

B : wishes of recipients who request callbacks

C : right to monitor calls for quality assurance

D : relationship of state law to federal law

Answer: B

Question 5

Which of the following is most likely to provide privacy protection to private-sector employees in the United States?

A : ate law, contract law, and tort law

B : Federal Trade Commission Act (FTC Act)

C : endments one, four, and five of the U.S. Constitution

D : U.S. Department of Health and Human Services (HHS)

Answer: A