TEXAS DATA PRIVACY COMPLIANCE
OFFICER – PRACTICE EXAM QUESTIONS
AND CORRECT ANSWERS (VERIFIED
ANSWERS) PLUS RATIONALES 2026 Q&A |
INSTANT DOWNLOAD PDF
1. Which Texas law primarily governs consumer data privacy?
A. HIPAA
B. GLBA
C. Texas Data Privacy and Security Act (TDPSA)
D. FERPA
Correct Answer: C
The TDPSA is Texas’s comprehensive consumer data privacy
law governing personal data processing.
2. The TDPSA applies to organizations that:
A. Are nonprofits only
B. Are federal agencies
C. Conduct business in Texas or produce products/services
consumed by Texans
D. Process only employee data
,Correct Answer: C
TDPSA applies broadly to entities operating in or targeting
Texas residents.
3. Personal data under TDPSA refers to:
A. Only financial data
B. Only government records
C. Information linked or reasonably linkable to an identified
individual
D. Aggregated statistics
Correct Answer: C
Personal data includes any data reasonably linked to an
identifiable consumer.
4. Which data is excluded from TDPSA?
A. Consumer purchase history
B. Biometric identifiers
C. De-identified data
D. Online identifiers
Correct Answer: C
De-identified data is excluded if it cannot reasonably identify
an individual.
,5. Sensitive data includes:
A. ZIP code
B. Browser type
C. Biometric and precise geolocation data
D. Public records
Correct Answer: C
Sensitive data receives heightened protection due to risk of
harm.
6. Before processing sensitive data, a controller must:
A. Notify consumers only
B. Obtain verbal consent
C. Obtain consumer consent
D. Register with Texas
Correct Answer: C
TDPSA requires affirmative consent before processing sensitive
data.
7. A “controller” is best defined as:
A. Data storage provider
B. Entity determining purposes and means of processing
, C. Cybersecurity vendor
D. IT administrator
Correct Answer: B
Controllers decide why and how personal data is processed.
8. A “processor” is:
A. A regulator
B. A data subject
C. Entity processing data on behalf of a controller
D. A law enforcement agency
Correct Answer: C
Processors act under controller instructions.
9. Which consumer right is guaranteed under TDPSA?
A. Right to anonymity
B. Right to sue directly
C. Right to access personal data
D. Right to unlimited storage
Correct Answer: C
Consumers have access, correction, deletion, and portability
rights.
OFFICER – PRACTICE EXAM QUESTIONS
AND CORRECT ANSWERS (VERIFIED
ANSWERS) PLUS RATIONALES 2026 Q&A |
INSTANT DOWNLOAD PDF
1. Which Texas law primarily governs consumer data privacy?
A. HIPAA
B. GLBA
C. Texas Data Privacy and Security Act (TDPSA)
D. FERPA
Correct Answer: C
The TDPSA is Texas’s comprehensive consumer data privacy
law governing personal data processing.
2. The TDPSA applies to organizations that:
A. Are nonprofits only
B. Are federal agencies
C. Conduct business in Texas or produce products/services
consumed by Texans
D. Process only employee data
,Correct Answer: C
TDPSA applies broadly to entities operating in or targeting
Texas residents.
3. Personal data under TDPSA refers to:
A. Only financial data
B. Only government records
C. Information linked or reasonably linkable to an identified
individual
D. Aggregated statistics
Correct Answer: C
Personal data includes any data reasonably linked to an
identifiable consumer.
4. Which data is excluded from TDPSA?
A. Consumer purchase history
B. Biometric identifiers
C. De-identified data
D. Online identifiers
Correct Answer: C
De-identified data is excluded if it cannot reasonably identify
an individual.
,5. Sensitive data includes:
A. ZIP code
B. Browser type
C. Biometric and precise geolocation data
D. Public records
Correct Answer: C
Sensitive data receives heightened protection due to risk of
harm.
6. Before processing sensitive data, a controller must:
A. Notify consumers only
B. Obtain verbal consent
C. Obtain consumer consent
D. Register with Texas
Correct Answer: C
TDPSA requires affirmative consent before processing sensitive
data.
7. A “controller” is best defined as:
A. Data storage provider
B. Entity determining purposes and means of processing
, C. Cybersecurity vendor
D. IT administrator
Correct Answer: B
Controllers decide why and how personal data is processed.
8. A “processor” is:
A. A regulator
B. A data subject
C. Entity processing data on behalf of a controller
D. A law enforcement agency
Correct Answer: C
Processors act under controller instructions.
9. Which consumer right is guaranteed under TDPSA?
A. Right to anonymity
B. Right to sue directly
C. Right to access personal data
D. Right to unlimited storage
Correct Answer: C
Consumers have access, correction, deletion, and portability
rights.
