CIPP-A Online Practice Questions and Answers

Hong Kong's definition of a data user in the original PDPO applies to all of the following EXCEPT?

A. Trust corporations.

B. Third-party processors.

C. Private sector organizations.

D. Limited liability partnerships.

The "due diligence" exemption in Hong Kong's PDPO was meant to apply to?

A. Third-party data processors located in foreign countries.

B. Companies researching the viability of business mergers.

C. Service providers hosting customer information in the cloud.

D. Direct marketers acting in the best interest of their company.

How is the transparency of the complaint process treated in both Hong Kong and Singapore?

A. A complainant must alert all individuals potentially affected by the complaint.

B. Investigations into complaints in Hong Kong and Singapore are open to the public.

C. The Hong Kong and Singapore Commissioner may require the complainants to identify themselves before carrying out any investigation into the complaint.

D. The Hong Kong and Singapore commissioners are obliged to start investigations when receiving a complaint and inform the respondent of the personal details of the complainant.

SCENARIO

Which of the following is NOT excluded from the scope of Singapore's Do Not Call registry?

A. Messages that promote investment opportunities.

B. Messages that conduct market research.

C. Messages from charitable organizations.

D. Messages from political candidates.

What clarification did India make in a 2011 Press Note regarding their Sensitive Personal Data Rules?

A. That the rules apply to data subjects located outside of India.

B. That the rules apply to persons or companies collecting sensitive data within India.

C. That the data processor must provide notice to the data subject before data is processed.

D. That sensitive personal data or information includes passwords, financial information, medical records, and biometric information.

Although the right to privacy is not explicitly granted in the Indian Constitution, privacy advocates frequently cite Article 21's guarantee of?

A. Personal liberty.

B. Right to property.

C. Equality before the law.

D. Freedom from intrusion.

Which Hong Kong body has recommended legislation that provides for the right of civil action to be taken when private information is publicly disclosed?

A. Hong Kong's Court of Final Appeal.

B. Hong Kong Law Reform Commission.

C. Office of the Privacy Commissioner for Personal Data.

D. Standing Committee of the National People's Congress of the PRC.

In June 2011, the Hong Kong Privacy Commissioner determined that data subject consent is NOT valid if it is what?

A. Provided by the data subject solely in verbal form.

B. Used for a directly related but separate purpose.

C. Bundled with other terms of the agreement.

D. Intended for direct marketing purposes.

Cases in which an Indian company is accused of violating provisions of India's IT Act must be heard by?

A. The High Court.

B. A Grievance Officer.

C. An Adjudicating Officer.

D. The Cyber Appellate Tribunal.