CIPP/E Exam Review Questions and Detailed Answers

IAPP International Association of Privacy Professionals - founded in 2000 GDPR Global Data Privacy Regulation - May 2018 - states can make further legislation - stronger rights for online environment - SA have increased powers - broader application - anyone targeting EU cust - 173 recitals, 99 articles, 11 chapters Rational for Data Protection Increase in computers in 1970 and cross-border trade EEC European Economic Community Human Rights Declaration 1948 after WWII - right to private and family life and freedom of expression (Art 12) - created by Council of EU, adopted by United Nations ECHR (Court) European Court of Human Rights - binding decisions - gives opinion on ECHR - personal info to be private but not absolute right ECHR European Convention on Human Rights - 1953 - created by Council of EU (not just EU) - open to member states (application) - like HRD, recognizes the need for balance - based on Universal Human Rights Declaration OECD Organization for Economic Cooperation and Development - 1980 - created OECD guidelines on transborder flow of personal data - membership extends beyond Europe - focused on economic growth, NOT BINDING OECD Guidelines (1) Collection Limitation (consent, fair, lawful) (2) Data Quality (complete, accurate, update-to-date) (3)Purpose Specification (specified at collection) (4) Use Limitation (consistent with purpose) (5) Security Safeguards (against loss, destruction, modification, unauthorized access) (6) Openness (use of info, Controller identity & loc) (7) Individual Participation (entitled to receive from Controller)