©THESTAR 2024/2025 ALL RIGHTS RESERVED 12:54PM.
CIPP/E IAPP Practice Exam Questions And
Answers 2025 Update.
Which of the following data protection milestones is a treaty among member states of the
Council of Europe:
-Data Retention Directive
-Charter of Fundamental Rights
-Convention 108
-e-Privacy Directive
-GDPR - Answer✔Convention 108
Which of the following data protection milestones applies to public electronics communications
services and networks?
-Data Retention Directive
-Charter of Fundamental Rights
-Convention 108
-e-Privacy Directive
-GDPR - Answer✔e-Privacy Directive
The Universal Declaration of Human Rights is a product of which institution?
-The United Nations
-The Council of Europe
-The European Union - Answer✔The United Nations
Which European institutions is composed of 47 member states?
-The Council of Europe
-The European Union
-The European Economic Area - Answer✔The Council of Europe
1
,©THESTAR 2024/2025 ALL RIGHTS RESERVED 12:54PM.
Chose the characteristic that describes the European Parliament.
-Is responsible for legislative development, supervisory oversight of other institutions, and
development of the budget
-Defines the EU priorities and sets the political direction for the EU. - Answer✔Defines the EU
priorities and sets the political direction for the EU
Choose the characteristic that describes the European Council.
-Sets the overall political agenda of the EU
-Negotiates and adopts laws - Answer✔Sets the overall political agenda of the EU.
Choose the characteristic that describes the Council of the EU
-Is sometimes described as the executive body of the EU
-Is one of the main decision-making bodies of the EU - Answer✔Is one of the main decision
making bodies of the EU.
Choose the characteristic that describes the European Commission.
-Has the power to propose legislation
-Is composed of a directly elected body - Answer✔Has the power to propose legislation
Choose the characteristic that describes the Court of Justice of the EU
-Makes decisions on issues of EU law
-Is based in Strasbourg - Answer✔Makes decisions on issues of EU law.
What is the function of the 4 step test?
-Determine if data qualifies as personal data
-Determine i personal data is anonymous
-Determine if personal date belongs to special categories
-Determine if personal data is pseudonymous. - Answer✔Determine if data qualifies as personal
data
Which criteria are used to identify personal data? Select all that apply
-natural person
-an identified or identifiable
-any information
2
, ©THESTAR 2024/2025 ALL RIGHTS RESERVED 12:54PM.
-relating to
- or anonymous - Answer✔All EXCEPT "or anonymous
Select the types of personal data elements that belong to special categories under the GDPR.
-Personal data revealing religious or philosophical beliefs
-Data relating to personal interests and hobbies
-Data concerning health
-Personal data revealing political opinions
-Personal data revealing financial information
-Genetic data used to uniquely identify a natural person - Answer✔All EXCEPT
-personal interests and hobbies
-financial information
True or False: Personal data either belongs to special categories or does not. There is no grey
area. - Answer✔False
True or False: Anonymising personal data is always possible. - Answer✔False
True or false: Pseudonymous data is protected by the GDPR. - Answer✔True
True or false: A data controller may be a natural person or a legal entity, while a data processor
must be a legal entity. - Answer✔False
True or false: a contract protects a processor from being held to the same legal obligations as
the controller. - Answer✔False
True or False: A processor may decide wehre and how to process personal data. -
Answer✔False
True or false: When personal data is being processed, there is always a controller. -
Answer✔True
What is data processing:
-Any action involved in securing and protecting data
-Any action performed upon data
-Any action involved in collecting personal data
-Any action that adapts or alters data. - Answer✔Any action performed upon data.
What are the criteria used to determine the territorial scope of the GDPR: Select all that apply.
3
CIPP/E IAPP Practice Exam Questions And
Answers 2025 Update.
Which of the following data protection milestones is a treaty among member states of the
Council of Europe:
-Data Retention Directive
-Charter of Fundamental Rights
-Convention 108
-e-Privacy Directive
-GDPR - Answer✔Convention 108
Which of the following data protection milestones applies to public electronics communications
services and networks?
-Data Retention Directive
-Charter of Fundamental Rights
-Convention 108
-e-Privacy Directive
-GDPR - Answer✔e-Privacy Directive
The Universal Declaration of Human Rights is a product of which institution?
-The United Nations
-The Council of Europe
-The European Union - Answer✔The United Nations
Which European institutions is composed of 47 member states?
-The Council of Europe
-The European Union
-The European Economic Area - Answer✔The Council of Europe
1
,©THESTAR 2024/2025 ALL RIGHTS RESERVED 12:54PM.
Chose the characteristic that describes the European Parliament.
-Is responsible for legislative development, supervisory oversight of other institutions, and
development of the budget
-Defines the EU priorities and sets the political direction for the EU. - Answer✔Defines the EU
priorities and sets the political direction for the EU
Choose the characteristic that describes the European Council.
-Sets the overall political agenda of the EU
-Negotiates and adopts laws - Answer✔Sets the overall political agenda of the EU.
Choose the characteristic that describes the Council of the EU
-Is sometimes described as the executive body of the EU
-Is one of the main decision-making bodies of the EU - Answer✔Is one of the main decision
making bodies of the EU.
Choose the characteristic that describes the European Commission.
-Has the power to propose legislation
-Is composed of a directly elected body - Answer✔Has the power to propose legislation
Choose the characteristic that describes the Court of Justice of the EU
-Makes decisions on issues of EU law
-Is based in Strasbourg - Answer✔Makes decisions on issues of EU law.
What is the function of the 4 step test?
-Determine if data qualifies as personal data
-Determine i personal data is anonymous
-Determine if personal date belongs to special categories
-Determine if personal data is pseudonymous. - Answer✔Determine if data qualifies as personal
data
Which criteria are used to identify personal data? Select all that apply
-natural person
-an identified or identifiable
-any information
2
, ©THESTAR 2024/2025 ALL RIGHTS RESERVED 12:54PM.
-relating to
- or anonymous - Answer✔All EXCEPT "or anonymous
Select the types of personal data elements that belong to special categories under the GDPR.
-Personal data revealing religious or philosophical beliefs
-Data relating to personal interests and hobbies
-Data concerning health
-Personal data revealing political opinions
-Personal data revealing financial information
-Genetic data used to uniquely identify a natural person - Answer✔All EXCEPT
-personal interests and hobbies
-financial information
True or False: Personal data either belongs to special categories or does not. There is no grey
area. - Answer✔False
True or False: Anonymising personal data is always possible. - Answer✔False
True or false: Pseudonymous data is protected by the GDPR. - Answer✔True
True or false: A data controller may be a natural person or a legal entity, while a data processor
must be a legal entity. - Answer✔False
True or false: a contract protects a processor from being held to the same legal obligations as
the controller. - Answer✔False
True or False: A processor may decide wehre and how to process personal data. -
Answer✔False
True or false: When personal data is being processed, there is always a controller. -
Answer✔True
What is data processing:
-Any action involved in securing and protecting data
-Any action performed upon data
-Any action involved in collecting personal data
-Any action that adapts or alters data. - Answer✔Any action performed upon data.
What are the criteria used to determine the territorial scope of the GDPR: Select all that apply.
3
