CIPP/E Self-Study Set Questions and Answers
CIPP/E Self-Study Set Questions and
Answers
Question 1
UDHR Article re: Privacy Right
Correct Answer
Article 12
Question 2
UDHR Article re: Freedom of Expression
Correct Answer
Article 19
Question 3
In Rome, in 1950, the Council of Europe invited individual states to sign the
(___________). What are the articles re: privacy?
Correct Answer
(1) European Convention on Human Rights (2) Article 8 & 10(2)
Question 4
What date were the OECD "Guidelines" passed?
OECD developed Guidelines on the Protection of Privacy and Transborder Flows of
Personal Data ('Guidelines') laid out basic rules that govern trans-border data flows
and the protection of personal information and privacy.
Correct Answer
23 September 1980
Page 1 of 32
, CIPP/E Self-Study Set Questions and Answers
Question 5
What are the 8 OECD Guidelines? CUPID-AS-O
Correct Answer
(1) Collection Limitation: Collected Fairly/legally
(2) Use limitation: Disclosure needs consent
(3) Purpose Specification: @ time of collection
(4) Individual Participation
(5) Data Quality: relevant/accurate/complete/up to date
(6) Accountability: Controllers are accountable
(7) Security Safeguards: Loss/access/destruction/use/modification/disclosure
(8) Openness: regarding the use and location of controller.
Question 6
What was the first legally binding international instrument in the area of data
protection?
Correct Answer
The Convention for the Protection of Individuals with regard to Automatic
Processing of Personal Data ('Convention 108') was adopted by the Council of
Europe and opened for signature to the member states of the Council of Europe 28
January 1981.
Question 7
Convention 108's Substantive Law Provisions stipulate that PI undergoing automatic
processing shall be subject to 5 principles: PAPA-P
Correct Answer
(1) Processed fairly and lawfully
(2) Adequate, relevant, and not excessive
(3) Purpose driven
(4) Accurate
(5) Preserved no longer than necessary
Page 2 of 32
, CIPP/E Self-Study Set Questions and Answers
Question 8
What should not happen to PI that reveals racial origin, political opinions or religious
or other beliefs, as well as personal data that concerns health or sexual life or criminal
convictions under Convention 108?
Correct Answer
It should not be processed automatically.
Question 9
What was the objective of Convention 108?
Correct Answer
To introduce a harmonized approach to data protection on the basis of
international agreement on principles with implementation left to the discretion of
the member states.
Question 10
When did GDPR go into force?
Correct Answer
25 May 2018
Question 11
The aim of the LEDP Directive is to
Correct Answer
('Law Enforcement Data Protection Directive', or LEDP Directive): harmonise the
rules in place across the member states to protect citizens' fundamental rights
whenever personal data are used by criminal law enforcement authorities
Question 12
The ePrivacy Directive sets out rules relating to
Correct Answer
processing personal data across 'public communications networks'.
Page 3 of 32
, CIPP/E Self-Study Set Questions and Answers
Question 13
The Lisbon Treaty changed other treaties by promoting the Charter of Fundamental
Rights of the European Union ('the Charter') to
Correct Answer
the same legal status as treaties, therefore making it legally binding on the
institutions.
Question 14
What articles of Charter of Fundamental Rights of the European Union ('the Charter')
enshrine privacy?
Correct Answer
Article 7 (private life and family) and Article 8 (protection of personal data) and
Article 41 (good administration such as accessing your data)
Question 15
How is the The European Parliament elected and what are some of it's characteristics?
Correct Answer
Citizens of the EU. Parliament has 751 members, including the president,
representing all 28 EU countries. The European Parliament has the greatest impact
on data protection and privacy issues through its role in the legislative process of
the EU. The Parliament has frequently been a vocal advocate of the right to privacy,
often taking a more protective stance than other institutions, such as with the
passage of GDPR.
Question 16
What is the purpose of the European Counsel and what are some of it's
characteristics?
Correct Answer
To provide the Union with the necessary impetus for its development and shall
define the general political directions and priorities thereof. It shall not exercise
legislative functions. Comprises the heads of each of the 28 member states,
together with the president of the Commission, and it meets four times a year to
define the EU's priorities and set political direction for the EU. Under the Treaty of
Lisbon, the European Council is presided over by a president who is elected by
qualified majority for a term of two-and-a-half years, renewable once.
Page 4 of 32
CIPP/E Self-Study Set Questions and
Answers
Question 1
UDHR Article re: Privacy Right
Correct Answer
Article 12
Question 2
UDHR Article re: Freedom of Expression
Correct Answer
Article 19
Question 3
In Rome, in 1950, the Council of Europe invited individual states to sign the
(___________). What are the articles re: privacy?
Correct Answer
(1) European Convention on Human Rights (2) Article 8 & 10(2)
Question 4
What date were the OECD "Guidelines" passed?
OECD developed Guidelines on the Protection of Privacy and Transborder Flows of
Personal Data ('Guidelines') laid out basic rules that govern trans-border data flows
and the protection of personal information and privacy.
Correct Answer
23 September 1980
Page 1 of 32
, CIPP/E Self-Study Set Questions and Answers
Question 5
What are the 8 OECD Guidelines? CUPID-AS-O
Correct Answer
(1) Collection Limitation: Collected Fairly/legally
(2) Use limitation: Disclosure needs consent
(3) Purpose Specification: @ time of collection
(4) Individual Participation
(5) Data Quality: relevant/accurate/complete/up to date
(6) Accountability: Controllers are accountable
(7) Security Safeguards: Loss/access/destruction/use/modification/disclosure
(8) Openness: regarding the use and location of controller.
Question 6
What was the first legally binding international instrument in the area of data
protection?
Correct Answer
The Convention for the Protection of Individuals with regard to Automatic
Processing of Personal Data ('Convention 108') was adopted by the Council of
Europe and opened for signature to the member states of the Council of Europe 28
January 1981.
Question 7
Convention 108's Substantive Law Provisions stipulate that PI undergoing automatic
processing shall be subject to 5 principles: PAPA-P
Correct Answer
(1) Processed fairly and lawfully
(2) Adequate, relevant, and not excessive
(3) Purpose driven
(4) Accurate
(5) Preserved no longer than necessary
Page 2 of 32
, CIPP/E Self-Study Set Questions and Answers
Question 8
What should not happen to PI that reveals racial origin, political opinions or religious
or other beliefs, as well as personal data that concerns health or sexual life or criminal
convictions under Convention 108?
Correct Answer
It should not be processed automatically.
Question 9
What was the objective of Convention 108?
Correct Answer
To introduce a harmonized approach to data protection on the basis of
international agreement on principles with implementation left to the discretion of
the member states.
Question 10
When did GDPR go into force?
Correct Answer
25 May 2018
Question 11
The aim of the LEDP Directive is to
Correct Answer
('Law Enforcement Data Protection Directive', or LEDP Directive): harmonise the
rules in place across the member states to protect citizens' fundamental rights
whenever personal data are used by criminal law enforcement authorities
Question 12
The ePrivacy Directive sets out rules relating to
Correct Answer
processing personal data across 'public communications networks'.
Page 3 of 32
, CIPP/E Self-Study Set Questions and Answers
Question 13
The Lisbon Treaty changed other treaties by promoting the Charter of Fundamental
Rights of the European Union ('the Charter') to
Correct Answer
the same legal status as treaties, therefore making it legally binding on the
institutions.
Question 14
What articles of Charter of Fundamental Rights of the European Union ('the Charter')
enshrine privacy?
Correct Answer
Article 7 (private life and family) and Article 8 (protection of personal data) and
Article 41 (good administration such as accessing your data)
Question 15
How is the The European Parliament elected and what are some of it's characteristics?
Correct Answer
Citizens of the EU. Parliament has 751 members, including the president,
representing all 28 EU countries. The European Parliament has the greatest impact
on data protection and privacy issues through its role in the legislative process of
the EU. The Parliament has frequently been a vocal advocate of the right to privacy,
often taking a more protective stance than other institutions, such as with the
passage of GDPR.
Question 16
What is the purpose of the European Counsel and what are some of it's
characteristics?
Correct Answer
To provide the Union with the necessary impetus for its development and shall
define the general political directions and priorities thereof. It shall not exercise
legislative functions. Comprises the heads of each of the 28 member states,
together with the president of the Commission, and it meets four times a year to
define the EU's priorities and set political direction for the EU. Under the Treaty of
Lisbon, the European Council is presided over by a president who is elected by
qualified majority for a term of two-and-a-half years, renewable once.
Page 4 of 32
