Free Access IAPP.CIPP-E.v2022-07-03.q102 Practice Test (Page 13)

Question 56

In the event of a data breach, which type of information are data controllers NOT required to provide to either the supervisory authorities or the data subjects?

A.The contact details of the appropriate data protection officer.

B.The measures being taken to address the breach.

C.The predicted consequences of the breach.

D.The type of security safeguards used to protect the data.

Question 57

Which of the following is NOT an explicit right granted to data subjects under the GDPR?

A.The right to opt-out of the sale of their personal data to third parties.

B.The right to request access to the personal data a controller holds about them.

C.The right to request the deletion of data a controller holds about them.

D.The right to request restriction of processing of personal data, under certain scenarios.

Question 58

With the issue of consent, the GDPR allows member states some choice regarding what?

A.The mechanisms through which consent may be communicated

B.The circumstances in which silence or inactivity may constitute consent

C.The age at which children must be required to obtain parental consent

D.The timeframe in which data subjects are allowed to withdraw their consent

Question 59

Many businesses print their employees' photographs on building passes, so that employees can be identified by security staff. This is notwithstanding the fact that facial images potentially qualify as biometric data under the GDPR. Why would such practice be permitted?

A.Because use of biometric data to confirm the unique identification of data subjects benefits from an exemption.

B.Because photographs qualify as biometric data only when they undergo a "specific technical processing".

C.Because employees are deemed to have given their explicit consent when they agree to be photographed by their employer.

D.Because photographic ID is a physical security measure which is "necessary for reasons of substantial public interest".

Question 60

What is one major goal that the OECD Guidelines, Convention 108 and the Data Protection Directive (Directive
95/46/EC) all had in common but largely failed to achieve in Europe?

A.The establishment of a list of legitimate data processing criteria

B.The creation of legally binding data protection principles

C.The synchronization of approaches to data protection

D.The restriction of cross-border data flow

Other Version: 982IAPP.CIPP-E.v2025-08-02.q177; 1379IAPP.CIPP-E.v2023-08-14.q153; 1588IAPP.CIPP-E.v2022-11-25.q113; 2049IAPP.CIPP-E.v2022-05-14.q101; 57IAPP.Trainingdump.CIPP-E.v2021-11-07.by.june.59q.pdf

Latest Upload: 106Huawei.H35-210_V2.5.v2025-09-18.q127; 105NBMTM.BCMTMS.v2025-09-18.q34; 105Microsoft.PL-500.v2025-09-18.q152; 111GAQM.CDCS-001.v2025-09-17.q15; 117Huawei.H19-301_V4.0.v2025-09-17.q37; 107VMware.5V0-33.23.v2025-09-17.q24; 116Oracle.1Z0-1078-23.v2025-09-17.q30; 155IAPP.CIPP-US.v2025-09-17.q217; 159Salesforce.ADM-201.v2025-09-16.q192; 141SAP.C-HRHPC-2505.v2025-09-15.q26

Question 56

Question 57

Question 58

Question 59

Question 60

Download PDF File