CIPP/E IAPP UPDATED EXAMS SCRIPT QUESTIONS AND
ANSWERS SURE A+
✔✔Which of the following mechanisms facilitates the provision of relevant information
between supervisory authorities.
-Urgency procedure
-Mutual assistance
-Cooperation
-Consistency mechanism - ✔✔Mutual Assistance
✔✔Which of the following mechanisms facilitates a specific collaborative process
between supervisory authorities, the commission and the European Data Protection
Board for adopting certain measures and ensuring consistent GDPR application?
-Cooperation
-Joint operations
-Dispute resolution
-Consistency mechanism - ✔✔consistency mechanism
✔✔Which types of laws should be considered when processing employees' personal
data? Select all that apply.
- Local employment law
-EU data protection law
-Member state data protection law - ✔✔All
✔✔What must be provided to employees when processing their personal data?
-Notice that their personal data will be processed
-The supervisory authority's contact information
-Opt-in
-Opt-out - ✔✔Notice
✔✔True or false: Some employers may be required to consult with works councils and
or trade unions to process employee's personal data. - ✔✔True
✔✔True of false: BYOD policies are designed to protect employee's personal data. -
✔✔False
, ✔✔True or false: Alternatives to employee monitoring should always be considered. -
✔✔True
✔✔What U.S. act requires companies to have a system in place to reciee anonymous
complaints about potential wrongdoing?
-Sarbanes-Oxley Act (SOX)
-Young-Underthorn Act (YOU)
-Washington's Whistle-blowing Act (WOW)
-Barnes Laremey Act (BLAME) - ✔✔Sarbanes-Oxley Act (SOX)
✔✔which of the following statements are true of private sector entities that conduct
surveillance? Select all that apply.
-The surveillance they conduct must be based on legitimate purposes.
-The surveillance they conduct must comply wiht national laws.
-They include bodies such as national security agencies and law enforcement
authorities - ✔✔-the surveillance must be based on legitimate purposes
-The surveillance must comply with national laws.
✔✔The ePrivacy Directive governs the processing of which types of data? Select all
that apply.
-Traffic data
-Content data
-Location data - ✔✔All
✔✔True of false: The ePrivacy Directive governs the processing of data through both
private and public carriers and communications networks. - ✔✔False. it concerns only
public carriers and communications networks.
✔✔Which of the following is not a data protection consideration associate with collecting
personal data via CCTV?
-Proportionality
-Duration of the video
-Lawfulness
-Individual's rights
-Prior checking
-Information provision - ✔✔Duration of the video
ANSWERS SURE A+
✔✔Which of the following mechanisms facilitates the provision of relevant information
between supervisory authorities.
-Urgency procedure
-Mutual assistance
-Cooperation
-Consistency mechanism - ✔✔Mutual Assistance
✔✔Which of the following mechanisms facilitates a specific collaborative process
between supervisory authorities, the commission and the European Data Protection
Board for adopting certain measures and ensuring consistent GDPR application?
-Cooperation
-Joint operations
-Dispute resolution
-Consistency mechanism - ✔✔consistency mechanism
✔✔Which types of laws should be considered when processing employees' personal
data? Select all that apply.
- Local employment law
-EU data protection law
-Member state data protection law - ✔✔All
✔✔What must be provided to employees when processing their personal data?
-Notice that their personal data will be processed
-The supervisory authority's contact information
-Opt-in
-Opt-out - ✔✔Notice
✔✔True or false: Some employers may be required to consult with works councils and
or trade unions to process employee's personal data. - ✔✔True
✔✔True of false: BYOD policies are designed to protect employee's personal data. -
✔✔False
, ✔✔True or false: Alternatives to employee monitoring should always be considered. -
✔✔True
✔✔What U.S. act requires companies to have a system in place to reciee anonymous
complaints about potential wrongdoing?
-Sarbanes-Oxley Act (SOX)
-Young-Underthorn Act (YOU)
-Washington's Whistle-blowing Act (WOW)
-Barnes Laremey Act (BLAME) - ✔✔Sarbanes-Oxley Act (SOX)
✔✔which of the following statements are true of private sector entities that conduct
surveillance? Select all that apply.
-The surveillance they conduct must be based on legitimate purposes.
-The surveillance they conduct must comply wiht national laws.
-They include bodies such as national security agencies and law enforcement
authorities - ✔✔-the surveillance must be based on legitimate purposes
-The surveillance must comply with national laws.
✔✔The ePrivacy Directive governs the processing of which types of data? Select all
that apply.
-Traffic data
-Content data
-Location data - ✔✔All
✔✔True of false: The ePrivacy Directive governs the processing of data through both
private and public carriers and communications networks. - ✔✔False. it concerns only
public carriers and communications networks.
✔✔Which of the following is not a data protection consideration associate with collecting
personal data via CCTV?
-Proportionality
-Duration of the video
-Lawfulness
-Individual's rights
-Prior checking
-Information provision - ✔✔Duration of the video
