CIPP IAPP 5

Question 1

A Privacy Impact Assessment (PIA) is primarily used to:

Accepted Answer

Identify and mitigate privacy risks before deploying a new system or process

Answer

A PIA proactively identifies privacy risks and impacts of a new project or system before implementation, enabling organizations to build in appropriate safeguards.

Question 2

Under CCPA/CPRA, the right to correct inaccurate personal information must be fulfilled by a business within:

Accepted Answer

45 days of receiving the request, extendable by another 45 days

Answer

CPRA requires businesses to respond to consumer requests to correct inaccurate personal information within 45 days, with a possible 45-day extension if reasonably necessary.

Question 3

Which concept describes the practice of ensuring that data collected is adequate, relevant, and limited to what is necessary for the specified purpose?

Accepted Answer

Data minimization

Answer

Data minimization is the principle that organizations should only collect personal data that is adequate, relevant, and necessary for the explicitly stated purpose.

Question 4

In the context of US employment privacy, which action by an employer is generally permissible without employee consent?

Accepted Answer

Recording calls on company phone systems after providing notice

Answer

Employers generally may monitor company-provided phone systems and communications after providing notice, as employees have a reduced expectation of privacy on employer systems.

Question 5

The FTC's enforcement action against a company for 'unfair' practices under Section 5 requires demonstrating that the practice:

Accepted Answer

Caused or was likely to cause substantial injury not reasonably avoidable by consumers and not outweighed by countervailing benefits

Answer

Unfairness under FTC Section 5 requires: substantial consumer injury, injury not reasonably avoidable by consumers, and injury not outweighed by benefits to consumers or competition.

Certified Information Privacy Professional Practice Test

Certified Information Privacy Professional Practice Test

CIPP IAPP 5