CIPP/E EXAM STUDY GUIDE 2025 |
ALL QUESTIONS AND CORRECT
ANSWERS | VERIFIED ANSWERS |
LATEST VERSION | GRADED A+ |
BRAND NEW VERSION!
Save
Terms in this set (224)
International Association of Privacy
IAPP
Professionals - founded in 2000
, Global Data Privacy Regulation -
May 2018
- states can make further legislation
- stronger rights for online
GDPR environment
- SA have increased powers
- broader application - anyone
targeting EU cust
- 173 recitals, 99 articles, 11 chapters
Rational for Data Increase in computers in 1970 and
Protection cross-border trade
EEC European Economic Community
1948 after WWII - right to private
and family life and freedom of
Human Rights
expression (Art 12)
Declaration
- created by Council of EU, adopted
by United Nations
European Court of Human Rights -
binding decisions
ECHR (Court) - gives opinion on ECHR
- personal info to be private but not
absolute right
, European Convention on Human
Rights - 1953
- created by Council of EU (not just
EU)
- open to member states
ECHR
(application)
- like HRD, recognizes the need for
balance
- based on Universal Human Rights
Declaration
Organization for Economic
Cooperation and Development -
1980
- created OECD guidelines on
OECD transborder flow of personal data
- membership extends beyond
Europe
- focused on economic growth, NOT
BINDING
, (1) Collection Limitation (consent,
fair, lawful)
(2) Data Quality (complete, accurate,
update-to-date)
(3)Purpose Specification (specified
at collection)
(4) Use Limitation (consistent with
purpose)
OECD
(5) Security Safeguards (against loss,
Guidelines
destruction, modification,
unauthorized access)
(6) Openness (use of info, Controller
identity & loc)
(7) Individual Participation (entitled
to receive from Controller)
(8) Accountability (controller
complies with above)
- domestic processing & re-export
of data
- transborder flows are
OECD
uninterrupted & secure
Guidelines -
- don't engage with other members
Member state
unless guidelines are observed
considerations
- member state can restrict if
protection not provided
- avoid laws to restrict TB data flows
ALL QUESTIONS AND CORRECT
ANSWERS | VERIFIED ANSWERS |
LATEST VERSION | GRADED A+ |
BRAND NEW VERSION!
Save
Terms in this set (224)
International Association of Privacy
IAPP
Professionals - founded in 2000
, Global Data Privacy Regulation -
May 2018
- states can make further legislation
- stronger rights for online
GDPR environment
- SA have increased powers
- broader application - anyone
targeting EU cust
- 173 recitals, 99 articles, 11 chapters
Rational for Data Increase in computers in 1970 and
Protection cross-border trade
EEC European Economic Community
1948 after WWII - right to private
and family life and freedom of
Human Rights
expression (Art 12)
Declaration
- created by Council of EU, adopted
by United Nations
European Court of Human Rights -
binding decisions
ECHR (Court) - gives opinion on ECHR
- personal info to be private but not
absolute right
, European Convention on Human
Rights - 1953
- created by Council of EU (not just
EU)
- open to member states
ECHR
(application)
- like HRD, recognizes the need for
balance
- based on Universal Human Rights
Declaration
Organization for Economic
Cooperation and Development -
1980
- created OECD guidelines on
OECD transborder flow of personal data
- membership extends beyond
Europe
- focused on economic growth, NOT
BINDING
, (1) Collection Limitation (consent,
fair, lawful)
(2) Data Quality (complete, accurate,
update-to-date)
(3)Purpose Specification (specified
at collection)
(4) Use Limitation (consistent with
purpose)
OECD
(5) Security Safeguards (against loss,
Guidelines
destruction, modification,
unauthorized access)
(6) Openness (use of info, Controller
identity & loc)
(7) Individual Participation (entitled
to receive from Controller)
(8) Accountability (controller
complies with above)
- domestic processing & re-export
of data
- transborder flows are
OECD
uninterrupted & secure
Guidelines -
- don't engage with other members
Member state
unless guidelines are observed
considerations
- member state can restrict if
protection not provided
- avoid laws to restrict TB data flows
