Free IAPP CIPP-E Exam Questions
Try our Free Demo Practice Tests for Comprehensive CIPP-E Exam Preparation
-
IAPP CIPP-E Exam Questions
-
Provided By: IAPP
- Exam: Certified Information Privacy Professional/Europe
- Certification: IAPP Certification Programs
-
Total Questions: 320
-
Updated On: May 24, 2026
-
Rated: 4.9 |
-
Online Users: 640
-
Question 1
-
Start-up company MagicAl is developing an AI system that will be part of a medical device that detects skin
cancer. To take measures against potential bias in its AI system, the IT team decides to collect data about
users’ ethnic origin, nationality, and gender.Start-up company MagicAl is developing an AI system that will be part of a medical device that detects skin
cancer. To take measures against potential bias in its AI system, the IT team decides to collect data about
users’ ethnic origin, nationality, and gender.
Answer: C
-
Start-up company MagicAl is developing an AI system that will be part of a medical device that detects skin
cancer. To take measures against potential bias in its AI system, the IT team decides to collect data about
users’ ethnic origin, nationality, and gender.Start-up company MagicAl is developing an AI system that will be part of a medical device that detects skin
cancer. To take measures against potential bias in its AI system, the IT team decides to collect data about
users’ ethnic origin, nationality, and gender.
-
Question 2
-
According to the European Data Protection Board, if a controller that is not established in the EU but still subject to the GDPR becomes aware of a personal data breach, which supervisory authority or authorities must be notified?
Answer: A
-
According to the European Data Protection Board, if a controller that is not established in the EU but still subject to the GDPR becomes aware of a personal data breach, which supervisory authority or authorities must be notified?
-
Question 3
-
SCENARIO -
Please use the following to answer the next question:
Gentle Hedgehog Inc. is a privately owned website design agency incorporated in Italy. The company has numerous remote workers in different EU countries. Recently, the management of Gentle Hedgehog noticed a decrease in productivity of their sales team, especially among remote workers. As a result, the company plans to implement a robust but privacy-friendly remote surveillance system to prevent absenteeism, reward top performers, and ensure the best quality of customer service when sales people are interacting with customers.
Gentle Hedgehog eventually hires Sauron Eye Inc., a Chinese vendor of employee surveillance software whose European headquarters is in Germany. Sauron Eye s software provides powerful remote-monitoring capabilities, including 24/7 access to computer cameras and microphones, screen captures, emails, website history, and keystrokes. Any device can be remotely monitored from a central server that is securely installed at Gentle Hedgehog headquarters. The monitoring is invisible by default; however, a so-called Transparent Mode, which regularly and conspicuously notifies all users about the monitoring and its precise scope, also exists. Additionally, the monitored employees are required to use a built-in verification technology involving facial recognition each time they log in.
All monitoring data, including the facial recognition data, is securely stored in Microsoft Azure cloud servers operated by Sauron Eye, which are physically located in France.
What monitoring may be lawfully performed within the scope of Gentle Hedgehog’s business?
Answer: D
-
SCENARIO -
-
Question 4
-
Through a combination of hardware failure and human error, the decryption key for a bank’s customer
account transaction database has been lost. An investigation has determined that this was not the result of
hacking or malfeasance, simply an unfortunate combination of circumstances. Which of the following
accurately indicates the nature of this incident?
Answer: D
-
Through a combination of hardware failure and human error, the decryption key for a bank’s customer
account transaction database has been lost. An investigation has determined that this was not the result of
hacking or malfeasance, simply an unfortunate combination of circumstances. Which of the following
accurately indicates the nature of this incident?
-
Question 5
-
Jerry the Chief Marketing Officer for a sports apparel and trophy company, sells products to schools and athletic clubs globally Recently the company has decided to invest in a new line of customized sports equipment Jerry plans to email his current customer base to offer them a discount on their first purchase of such equipment.Jerry tells Kate, the Director of Privacy, about his plan. What is the best guidance Kate can provide to Jerry?
Answer: B
-