CIPP/E - Practice Exam
Study online at https://quizlet.com/_ewkyft
1. What kind of right is privacy in the context of the right to privacy is balanced against
article 8 of the European Convention of Hu- other rights, so it is not absolute.
man Rights?
a. an absolute right
b. more important than freedom of others
c. not an absolute right
d. freedom to impart ideas onto others
2. Which treaty established the European Eco- The Economic Community was estab-
nomic Community? lished by the treaty of Rome
a. treaty of Paris
b. treaty of Rome
c. treaty of Maastricht
d. treaty of Lisbon
3. Which European institution audits the Euro- the court is the external audit agency of
pean Union? the EU, and the name gives away that
they mainly perform audits.
a. European Parliament
b. European Council
c. European Central Bank
d. European Court of Auditors
4. Which of the following is the executive body of The Commission is the executive body
the European Union? that implements policies and deci-
sions, and monitors compliance.
a. European Court of Auditors
b. European Parliament
c. European Council
d. European Commission
, CIPP/E - Practice Exam
Study online at https://quizlet.com/_ewkyft
5. Which of the following are the two important GDPR and ePrivacy
European Privacy Laws?
a. the children online privacy protection act
and the protection of personal information
act
b. the European convention of human rights
and the data retention directive
c. BCRs and standard contractual clauses
d. General Data Protection Regulation and the
e-Privacy Directive
6. Which directive or law is the most likely docu- Although the GDPR also applies, the
ment referred to by a DPO for marketing via e-privacy has specific requirements for
e-mail electronic communications
a. GDPR
b. European Conv. Human Rights
c. Data Protection Directive
d. e-Privacy Directive
7. What is the most fitting definition of personal Identifiable person. ABC refer to crite-
data? ria that determine how personal data
should be treated but are themselves
a. data stored in a filing system not part of a definition of personal
b. data subject to automated processing data.
c. anything that says something about an iden-
tifiable person
d. information manifestly made public
8. Who determines the purpose and means of Only the controller decides what and
processing? how a data processing is meant for.
, CIPP/E - Practice Exam
Study online at https://quizlet.com/_ewkyft
a. controller
b. processor
c. DPA
9. When are data considered to be anonymous? if it is traceable, it still personal data
and cannot be treated as anonymous
a. when the names and addresses are re- info.
moved Encrypting something does not irre-
b. when data are encrypted versibly remove identifiers
c. when data cannot be traced back to an indi-
vidual
10. Which of the following is considered a DS? Natural person = DS. If a person is
anonymous, you cannot tell if the info
a. an identifiable person about whom info is is actually about that person.
stored
c. an anonymous person wishing no data is
collected about
11. Which of the following can be considered a the flower shop keeps personal data
processor? at the request of a company, that's
processor's activity. C is offering only
b. a flower shop maintaining a list of home ad- to private customers, not controllers;
dresses at the request of one of his corporate and d is not collecting on behalf of a
customers controller.
c. a cloud service, offering its services to pri-
vate customers
d. a data broker, selling anonymized data on its
own initiative.
12. When does the GDPR apply to a US-based Since the company is targeting EU citi-
company? zens, that's the most accurate scenario.
Study online at https://quizlet.com/_ewkyft
1. What kind of right is privacy in the context of the right to privacy is balanced against
article 8 of the European Convention of Hu- other rights, so it is not absolute.
man Rights?
a. an absolute right
b. more important than freedom of others
c. not an absolute right
d. freedom to impart ideas onto others
2. Which treaty established the European Eco- The Economic Community was estab-
nomic Community? lished by the treaty of Rome
a. treaty of Paris
b. treaty of Rome
c. treaty of Maastricht
d. treaty of Lisbon
3. Which European institution audits the Euro- the court is the external audit agency of
pean Union? the EU, and the name gives away that
they mainly perform audits.
a. European Parliament
b. European Council
c. European Central Bank
d. European Court of Auditors
4. Which of the following is the executive body of The Commission is the executive body
the European Union? that implements policies and deci-
sions, and monitors compliance.
a. European Court of Auditors
b. European Parliament
c. European Council
d. European Commission
, CIPP/E - Practice Exam
Study online at https://quizlet.com/_ewkyft
5. Which of the following are the two important GDPR and ePrivacy
European Privacy Laws?
a. the children online privacy protection act
and the protection of personal information
act
b. the European convention of human rights
and the data retention directive
c. BCRs and standard contractual clauses
d. General Data Protection Regulation and the
e-Privacy Directive
6. Which directive or law is the most likely docu- Although the GDPR also applies, the
ment referred to by a DPO for marketing via e-privacy has specific requirements for
e-mail electronic communications
a. GDPR
b. European Conv. Human Rights
c. Data Protection Directive
d. e-Privacy Directive
7. What is the most fitting definition of personal Identifiable person. ABC refer to crite-
data? ria that determine how personal data
should be treated but are themselves
a. data stored in a filing system not part of a definition of personal
b. data subject to automated processing data.
c. anything that says something about an iden-
tifiable person
d. information manifestly made public
8. Who determines the purpose and means of Only the controller decides what and
processing? how a data processing is meant for.
, CIPP/E - Practice Exam
Study online at https://quizlet.com/_ewkyft
a. controller
b. processor
c. DPA
9. When are data considered to be anonymous? if it is traceable, it still personal data
and cannot be treated as anonymous
a. when the names and addresses are re- info.
moved Encrypting something does not irre-
b. when data are encrypted versibly remove identifiers
c. when data cannot be traced back to an indi-
vidual
10. Which of the following is considered a DS? Natural person = DS. If a person is
anonymous, you cannot tell if the info
a. an identifiable person about whom info is is actually about that person.
stored
c. an anonymous person wishing no data is
collected about
11. Which of the following can be considered a the flower shop keeps personal data
processor? at the request of a company, that's
processor's activity. C is offering only
b. a flower shop maintaining a list of home ad- to private customers, not controllers;
dresses at the request of one of his corporate and d is not collecting on behalf of a
customers controller.
c. a cloud service, offering its services to pri-
vate customers
d. a data broker, selling anonymized data on its
own initiative.
12. When does the GDPR apply to a US-based Since the company is targeting EU citi-
company? zens, that's the most accurate scenario.
