Free Access IAPP.CIPP-C.v2022-08-02.q111 Practice Test (Page 5)

Question 16

Under Article 30 of the GDPR, controllers are required to keep records of all of the following EXCEPT?

A.Incidents of personal data breaches, whether disclosed or not.

B.Retention periods for erasure and deletion of categories of personal data.

C.Categories of recipients to whom the personal data have been disclosed.

D.Data inventory or data mapping exercises that have been conducted.

Question 17

What is an exception to the Electronic Communications Privacy Act of 1986 ban on interception of wire, oral and electronic communications?

A.If an organization intercepts an employee's purely personal call

B.Where one of the parties has given consent

C.Only if all parties have given consent

D.Where state law permits such interception

Question 18

Acme Student Loan Company has developed an artificial intelligence algorithm that determines whether an individual is likely to pay their bill or default. A person who is determined by the algorithm to be more likely to default will receive frequent payment reminder calls, while those who are less likely to default will not receive payment reminders.
Which of the following most accurately reflects the privacy concerns with Acme Student Loan Company using artificial intelligence in this manner?

A.If the algorithm makes automated decisions based on risk factors and public information, Acme need not determine if the algorithm has a disparate impact on protected classes.

B.If the algorithm uses risk factors that impact the automatic decision engine. Acme must ensure that the algorithm does not have a disparate impact on protected classes in the output.

C.If the algorithm uses information about protected classes to make automated decisions, Acme must ensure that the algorithm does not have a disparate impact on protected classes in the output.

D.If the algorithm's methodology is disclosed to consumers, then it is acceptable for Acme to have a disparate impact on protected classes.

Question 19

A company in France suffers a robbery over the weekend owing to a faulty alarm system. When it is determined that the break-in involves the loss of a substantial amount of data, the company decides on a CCTV system to monitor for future incidents. Company technicians install cameras in the entrance of the building, hallways and offices. Footage is recorded continuously, and is monitored by the home office in the United States. What is the most realistic step the company could take to address their security concerns and comply with the personal data processing principles set out in Article 5 of the GDPR?

A.Have cameras recording during work hours only.

B.Retain captured footage for no more than 30 days.

C.Restrict camera placement to building entrances only.

D.Seek informed consent from company employees.

Question 20

What is a key way that the Gramm-Leach-Bliley Act (GLBA) prevents unauthorized access into a person's back account?

A.By requiring the financial institutions limit the collection of personal information.

B.By requiring immediate public disclosure after a suspected security breach.

C.By requiring the amount of customer personal information printed on paper.

D.By restricting the disclosure of customer account numbers by financial institutions.

Other Version: 748IAPP.CIPP-C.v2024-06-06.q79; 1259IAPP.CIPP-C.v2022-05-06.q52; 1407IAPP.CIPP-C.v2022-04-09.q60; 71IAPP.Fast2test.CIPP-C.v2021-09-28.by.herman.65q.pdf

Latest Upload: 102Huawei.H35-210_V2.5.v2025-09-18.q127; 103NBMTM.BCMTMS.v2025-09-18.q34; 102Microsoft.PL-500.v2025-09-18.q152; 110GAQM.CDCS-001.v2025-09-17.q15; 116Huawei.H19-301_V4.0.v2025-09-17.q37; 105VMware.5V0-33.23.v2025-09-17.q24; 115Oracle.1Z0-1078-23.v2025-09-17.q30; 152IAPP.CIPP-US.v2025-09-17.q217; 158Salesforce.ADM-201.v2025-09-16.q192; 139SAP.C-HRHPC-2505.v2025-09-15.q26

Question 16

Question 17

Question 18

Question 19

Question 20

Download PDF File