Quiz about Certification Exam, International Association of Privacy Professionals (IAPP), Certified Information Privacy Professional/United States (CIPP/US)

Question 1

Which jurisdiction must courts have in order to hear a particular case?

Accepted Answer

Personal jurisdiction and subject matter jurisdiction

Answer

Subject matter jurisdiction and regulatory jurisdiction

Answer

Subject matter jurisdiction and professional jurisdiction

Answer

Personal jurisdiction and professional jurisdiction

Question 2

Which authority supervises and enforces laws regarding advertising to children via the Internet?

Accepted Answer

The Federal Trade Commission

Answer

The Office for Civil Rights

Answer

The Federal Communications Commission

Answer

The Department of Homeland Security

Question 3

According to Section 5 of the FTC Act, self-regulation primarily involves a company’s right to do
what?

Accepted Answer

Adhere to its industry’s code of conduct

Answer

Determine which bodies will be involved in adjudication

Answer

Decide if any enforcement actions are justified

Answer

Appeal decisions made against it

Question 4

Which was NOT one of the five priority areas listed by the Federal Trade Commission in its 2012
report, “Protecting Consumer Privacy in an Era of Rapid Change: Recommendations for Businesses
and Policymakers”?

Accepted Answer

Do Not Track

Answer

International data transfers

Answer

Large platform providers

Answer

Promoting enforceable self-regulatory codes

Question 5

The “Consumer Privacy Bill of Rights” presented in a 2012 Obama administration report is generally
based on?

Accepted Answer

Traditional fair information practices

Answer

The 1974 Privacy Act

Answer

Common law principles

Answer

European Union Directive

Question 6

What is a legal document approved by a judge that formalizes an agreement between a
governmental agency and an adverse party called?

Accepted Answer

A consent decree

Answer

Stare decisis decree

Answer

A judgment rider

Answer

Common law judgment

Question 7

Read this notice:
Our website uses cookies. Cookies allow us to identify the computer or device you’re using to access
the site, but they don’t identify you personally. For instructions on setting your Web browser to
refuse cookies, click here.
What type of legal choice does not notice provide?

Accepted Answer

Implied consent

Answer

Mandatory

Answer

Opt-in

Answer

Opt-out

Question 8

SCENARIO
Please use the following to answer the next QUESTION:
Cheryl is the sole owner of Fitness Coach, Inc., a medium-sized company that helps individuals
realize their physical fitness goals through classes, individual instruction, and access to an extensive
indoor gym. She has owned the company for ten years and has always been concerned about
protecting customer’s privacy while maintaining the highest level of service. She is proud that she
has built long-lasting customer relationships.
Although Cheryl and her staff have tried to make privacy protection a priority, the company has no
formal privacy policy. So Cheryl hired Janice, a privacy professional, to help her develop one.
After an initial assessment, Janice created a first of a new policy. Cheryl read through the draft and
was concerned about the many changes the policy would bring throughout the company. For
example, the draft policy stipulates that a customer’s personal information can only be held for one
year after paying for a service such as a session with personal trainer. It also promises that customer
information will not be shared with third parties without the written consent of the customer. The
wording of these rules worry Cheryl since stored personal information often helps her company to
serve her customers, even if there are long pauses between their visits. In addition, there are some
third parties that provide crucial services, such as aerobics instructors who teach classes on a
contract basis. Having access to customer files and understanding the fitness levels of their students
helps instructors to organize their classes.
Janice understood Cheryl’s concerns and was already formulating some ideas for revision. She tried
to put Cheryl at ease by pointing out that customer data can still be kept, but that it should be
classified according to levels of sensitivity. However, Cheryl was skeptical. It seemed that classifying
data and treating each type differently would cause undue difficulties in the company’s day-to-day
operations. Cheryl wants one simple data storage and access system that any employee can access if
needed.
Even though the privacy policy was only a draft, she was beginning to see that changes within her
company were going to be necessary. She told Janice that she would be more comfortable with
implementing the new policy gradually over a period of several months, one department at a time.
She was also interested in a layered approach by creating documents listing applicable parts of the
new policy for each department.
What is the best reason for Cheryl to follow Janice’s suggestion about classifying customer data?

Accepted Answer

It will increase the security of customers’ personal information (PI)

Answer

It will help employees stay better organized

Answer

It will help the company meet a federal mandate

Answer

It will prevent the company from collecting too much personal information (PI)

Question 9

SCENARIO
Please use the following to answer the next QUESTION:
Cheryl is the sole owner of Fitness Coach, Inc., a medium-sized company that helps individuals
realize their physical fitness goals through classes, individual instruction, and access to an extensive
indoor gym. She has owned the company for ten years and has always been concerned about
protecting customer’s privacy while maintaining the highest level of service. She is proud that she
has built long-lasting customer relationships.
Although Cheryl and her staff have tried to make privacy protection a priority, the company has no
formal privacy policy. So Cheryl hired Janice, a privacy professional, to help her develop one.
After an initial assessment, Janice created a first of a new policy. Cheryl read through the draft and
was concerned about the many changes the policy would bring throughout the company. For
example, the draft policy stipulates that a customer’s personal information can only be held for one
year after paying for a service such as a session with personal trainer. It also promises that customer
information will not be shared with third parties without the written consent of the customer. The
wording of these rules worry Cheryl since stored personal information often helps her company to
serve her customers, even if there are long pauses between their visits. In addition, there are some
third parties that provide crucial services, such as aerobics instructors who teach classes on a
contract basis. Having access to customer files and understanding the fitness levels of their students
helps instructors to organize their classes.
Janice understood Cheryl’s concerns and was already formulating some ideas for revision. She tried
to put Cheryl at ease by pointing out that customer data can still be kept, but that it should be
classified according to levels of sensitivity. However, Cheryl was skeptical. It seemed that classifying
data and treating each type differently would cause undue difficulties in the company’s day-to-day
operations. Cheryl wants one simple data storage and access system that any employee can access if
needed.
Even though the privacy policy was only a draft, she was beginning to see that changes within her
company were going to be necessary. She told Janice that she would be more comfortable with
implementing the new policy gradually over a period of several months, one department at a time.
She was also interested in a layered approach by creating documents listing applicable parts of the
new policy for each department.
What is the most likely risk of Fitness Coach, Inc. adopting Janice’s first draft of the privacy policy?

Accepted Answer

Leaving the company susceptible to violations by setting unrealistic goals

Answer

Failing to meet the needs of customers who are concerned about privacy

Answer

Showing a lack of trust in the organization’s privacy practices

Answer

Not being in standard compliance with applicable laws

Question 10

SCENARIO
Please use the following to answer the next QUESTION:
Cheryl is the sole owner of Fitness Coach, Inc., a medium-sized company that helps individuals
realize their physical fitness goals through classes, individual instruction, and access to an extensive
indoor gym. She has owned the company for ten years and has always been concerned about
protecting customer’s privacy while maintaining the highest level of service. She is proud that she
has built long-lasting customer relationships.
Although Cheryl and her staff have tried to make privacy protection a priority, the company has no
formal privacy policy. So Cheryl hired Janice, a privacy professional, to help her develop one.
After an initial assessment, Janice created a first of a new policy. Cheryl read through the draft and
was concerned about the many changes the policy would bring throughout the company. For
example, the draft policy stipulates that a customer’s personal information can only be held for one
year after paying for a service such as a session with personal trainer. It also promises that customer
information will not be shared with third parties without the written consent of the customer. The
wording of these rules worry Cheryl since stored personal information often helps her company to
serve her customers, even if there are long pauses between their visits. In addition, there are some
third parties that provide crucial services, such as aerobics instructors who teach classes on a
contract basis. Having access to customer files and understanding the fitness levels of their students
helps instructors to organize their classes.
Janice understood Cheryl’s concerns and was already formulating some ideas for revision. She tried
to put Cheryl at ease by pointing out that customer data can still be kept, but that it should be
classified according to levels of sensitivity. However, Cheryl was skeptical. It seemed that classifying
data and treating each type differently would cause undue difficulties in the company’s day-to-day
operations. Cheryl wants one simple data storage and access system that any employee can access if
needed.
Even though the privacy policy was only a draft, she was beginning to see that changes within her
company were going to be necessary. She told Janice that she would be more comfortable with
implementing the new policy gradually over a period of several months, one department at a time.
She was also interested in a layered approach by creating documents listing applicable parts of the
new policy for each department.
What is the main problem with Cheryl’s suggested method of communicating the new privacy
policy?

Accepted Answer

The policy might not be implemented consistency across departments.

Answer

The policy would not be considered valid if not communicated in full.

Answer

Employees would not be comfortable with a policy that is put into action over time.

Answer

Employees might not understand how the documents relate to the policy as a whole.

Quiz Certified Information Privacy Professional/United States (CIPP/US)

Free Test - Simulator Certified Information Privacy Professional/United States (CIPP/US)

Certified Information Privacy Professional/United States (CIPP/US) Practice test unlocks all online simulator questions

What to expect from our Certified Information Privacy Professional/United States (CIPP/US) practice tests and how to prepare for any exam?