CIPP-US Practice Test

CIPP-US Practice Test practice questions, page 6 of 11, with answer review and explanations.

Question 26

In which situation is a company operating under the assumption of implied consent?

  1. An employer contacts the professional references provided on an applicant’s resume
  2. An online retailer subscribes new customers to an e-mail list by default
  3. A landlord uses the information on a completed rental application to run a credit report
  4. A retail clerk asks a customer to provide a zip code at the check-out counter

Question 27

All of the following are tasks in the “Discover” phase of building an information management program EXCEPT?

  1. Facilitating participation across departments and levels
  2. Developing a process for review and update of privacy policies
  3. Deciding how aggressive to be in the use of personal information
  4. Understanding the laws that regulate a company’s collection of information

Question 28

Which of the following describes the most likely risk for a company developing a privacy policy with standards that are much higher than its competitors?

  1. Being more closely scrutinized for any breaches of policy
  2. Getting accused of discriminatory practices
  3. Attracting skepticism from auditors
  4. Having a security system failure

Question 29

If an organization certified under Privacy Shield wants to transfer personal data to a third party acting as an agent, the organization must ensure the third party does all of the following EXCEPT?

  1. Uses the transferred data for limited purposes
  2. Provides the same level of privacy protection as the organization
  3. Notifies the organization if it can no longer meet its requirements for proper data handling
  4. Enters a contract with the organization that states the third party will process data according to the consent agreement

Question 30

What was the original purpose of the Federal Trade Commission Act?

  1. To ensure privacy rights of U.S. citizens
  2. To protect consumers
  3. To enforce antitrust laws
  4. To negotiate consent decrees with companies violating personal privacy