Free Access IAPP.CIPM.v2022-07-29.q88 Practice Test (Page 10)

Question 41

Which is TRUE about the scope and authority of data protection oversight authorities?

A.The Office of the Privacy Commissioner (OPC) of Canada has the right to impose financial sanctions on violators

B.All authority in the European Union rests with the Data Protection Commission (DPC)

C.No one agency officially oversees the enforcement of privacy regulations in the United States

D.The Asia-Pacific Economic Cooperation (APEC) Privacy Frameworks require all member nations to designate a national data protection authority

Question 42

Which of the following actions is NOT required during a data privacy diligence process for Merger & Acquisition (M&A) deals?

A.Perform a privacy readiness assessment before the deal.

B.Compare the original use of personal data to post-merger use.

C.Update business processes to handle Data Subject Requests (DSRs).

D.Revise inventory of applications that house personal data and data mapping.

Question 43

The General Data Protection Regulation (GDPR) specifies fines that may be levied against data controllers for certain infringements. Which of the following will be subject to administrative fines of up to 10 000 000 EUR, or in the case of an undertaking, up to 2% of the total worldwide annual turnover of the preceding financial year?

A.Failure to demonstrate that consent was given by the data subject to the processing of their personal data where it is used as the basis for processing

B.Failure to implement technical and organizational measures to ensure data protection is enshrined by design and default

C.Failure to process personal information in a manner compatible with its original purpose

D.Failure to provide the means for a data subject to rectify inaccuracies in personal data

Question 44

What is one obligation that the General Data Protection Regulation (GDPR) imposes on data processors?

A.To honor all data access requests from data subjects

B.To inform data subjects about the identity and contact details of the controller

C.To implement appropriate technical and organizational measures that ensure an appropriate level of security

D.To carry out data protection impact assessments in cases where processing is likely to result in high risk to the rights and freedoms of individuals

Question 45

What is one obligation that the General Data Protection Regulation (GDPR) imposes on data processors?

A.To carry out data protection impact assessments in cases where processing is likely to result in high risk to the rights and freedoms of individuals

B.To inform data subjects about the identity and contact details of the controller

C.To honor all data access requests from data subjects

D.To implement appropriate technical and organizational measures that ensure an appropriate level of security

Other Version: 631IAPP.CIPM.v2024-04-27.q138; 1003IAPP.CIPM.v2023-11-15.q101; 1258IAPP.CIPM.v2023-09-04.q94; 969IAPP.CIPM.v2023-08-28.q89; 1873IAPP.CIPM.v2022-05-15.q95; 38IAPP.Trainingdump.CIPM.v2021-10-01.by.philip.66q.pdf

Latest Upload: 102Huawei.H35-210_V2.5.v2025-09-18.q127; 103NBMTM.BCMTMS.v2025-09-18.q34; 102Microsoft.PL-500.v2025-09-18.q152; 110GAQM.CDCS-001.v2025-09-17.q15; 116Huawei.H19-301_V4.0.v2025-09-17.q37; 105VMware.5V0-33.23.v2025-09-17.q24; 115Oracle.1Z0-1078-23.v2025-09-17.q30; 154IAPP.CIPP-US.v2025-09-17.q217; 158Salesforce.ADM-201.v2025-09-16.q192; 139SAP.C-HRHPC-2505.v2025-09-15.q26

Question 41

Question 42

Question 43

Question 44

Question 45

Download PDF File