CIPP/E Exam Questions
Study online at https://quizlet.com/_8i1ljz
1. Outliers work on their website to company x, employee A: NotifyOutliers
of Company X steals the data -delete it - tells boss.
Q: What is company x legally obliged to do?
2. Outliers work on their website to company x, employee A: Nothingas data was
of Company X steals the data -delete it - tells boss. deleted
Q: What does Outliers then need to do?
3. Outliers work on their website to company x, employee A: Consentto opt-in to
of Company X steals the data -delete it - tells boss. cookies
Q: Follows on with Cookies question?
4. Privacy notice for new Health App collecting sensitive A: Them form is asking for
data. health information from
Q: What is the problem with the draft? the outset, which is not le-
gal
5. Privacy notice for new Health App collecting sensitive A: Need to demonstrate
data steps to gain parental con-
Q: Potential problem with collecting children data? sent
6. Anna is lawyer foruniversity tasked with Student Department of Education
Records. Frank is a professor. Four types of data:Stu- Records
dent Data - personal infoEmployee Data - personal in-
foAlumni Data - personal infoDepartment of Education
Data:demographic data - no personal identifiers (used
to see how first year students progress, etc.)Frank
wants to build a database to process data and see
how first year students in his class progressed. Frank
builds algorithm to process data without identifiers.
All university systems are encrypted. Takes data to his
home laptop which is not encrypted. Loses laptop
, CIPP/E Exam Questions
Study online at https://quizlet.com/_8i1ljz
Q: Which types of data does Anna NOT have to include
in her record of processing activities?
7. Q: What should the Anna/DPO checkto confirm he can More information about
process those data? the algorithm he has de-
veloped
8. Q: He losses the data, what should happen next? Yes because potential high
Should they inform the students? risk since data was not en-
crypted
9. Case study on guy gets photo taken at a gym in Ger- Draft a draft decision and
many submit to supporting SAs
-consents to them using it for marketing for their opinion.
-Gym HQ in France
-Gyms all over EU
-He lives in UK
-Submits request to ICO in UK
-ICO refers to CNIL (this is the SA in France)
Q: In effort of Cooperation (the lead SA, CNIL, gets their
judgement) what should the they do now?
10. What does he have to do for lawsuit? (each location is Answer: Go to each gym
a controller!) branch...
11. Question on what he should do if he wants tosue Sue ANY relevant branch as
each can be liable for en-
tire damage
12. ABC Insurance gives data to subsidiary which begins Jason has right to object
direct marketing to Jason. Jason decides to switch in- and ABC must immediately
surance companies. ABC Insurance is direct marketing stop using his data.
to Jason. Jason asks them to stop but they say that
Study online at https://quizlet.com/_8i1ljz
1. Outliers work on their website to company x, employee A: NotifyOutliers
of Company X steals the data -delete it - tells boss.
Q: What is company x legally obliged to do?
2. Outliers work on their website to company x, employee A: Nothingas data was
of Company X steals the data -delete it - tells boss. deleted
Q: What does Outliers then need to do?
3. Outliers work on their website to company x, employee A: Consentto opt-in to
of Company X steals the data -delete it - tells boss. cookies
Q: Follows on with Cookies question?
4. Privacy notice for new Health App collecting sensitive A: Them form is asking for
data. health information from
Q: What is the problem with the draft? the outset, which is not le-
gal
5. Privacy notice for new Health App collecting sensitive A: Need to demonstrate
data steps to gain parental con-
Q: Potential problem with collecting children data? sent
6. Anna is lawyer foruniversity tasked with Student Department of Education
Records. Frank is a professor. Four types of data:Stu- Records
dent Data - personal infoEmployee Data - personal in-
foAlumni Data - personal infoDepartment of Education
Data:demographic data - no personal identifiers (used
to see how first year students progress, etc.)Frank
wants to build a database to process data and see
how first year students in his class progressed. Frank
builds algorithm to process data without identifiers.
All university systems are encrypted. Takes data to his
home laptop which is not encrypted. Loses laptop
, CIPP/E Exam Questions
Study online at https://quizlet.com/_8i1ljz
Q: Which types of data does Anna NOT have to include
in her record of processing activities?
7. Q: What should the Anna/DPO checkto confirm he can More information about
process those data? the algorithm he has de-
veloped
8. Q: He losses the data, what should happen next? Yes because potential high
Should they inform the students? risk since data was not en-
crypted
9. Case study on guy gets photo taken at a gym in Ger- Draft a draft decision and
many submit to supporting SAs
-consents to them using it for marketing for their opinion.
-Gym HQ in France
-Gyms all over EU
-He lives in UK
-Submits request to ICO in UK
-ICO refers to CNIL (this is the SA in France)
Q: In effort of Cooperation (the lead SA, CNIL, gets their
judgement) what should the they do now?
10. What does he have to do for lawsuit? (each location is Answer: Go to each gym
a controller!) branch...
11. Question on what he should do if he wants tosue Sue ANY relevant branch as
each can be liable for en-
tire damage
12. ABC Insurance gives data to subsidiary which begins Jason has right to object
direct marketing to Jason. Jason decides to switch in- and ABC must immediately
surance companies. ABC Insurance is direct marketing stop using his data.
to Jason. Jason asks them to stop but they say that
