Free CIPP-A Exam Braindumps (page: 5)

Page 4 of 23

SCENARIO – Please use the following to answer the next question:

Singabank is a boutique bank in Singapore. After being notified during the hiring process, Singabank employees are subject to constant and thorough monitoring and tracking through CCTV cameras, computer monitoring software and keyboard loggers. Singabank does this to ensure its employees are complying with Singabank's data security policy. Bigbank is now considering acquiring Singabank's retail banking division. As part of its due diligence, Bigbank is seeking for Singabank to disclose to it all of its surveillance material on its employees, whether or not they are part of the retail banking division. Jimmy works in Singabank's investment banking division.

What would make Singabank's monitoring of its employees illegal?

  1. If the employees did not explicitly consent to it.
  2. If the bank's data security policy was being overhauled.
  3. If the bank collected employees' sensitive personal information.
  4. If the employees were not provided contact information to ask questions about the monitoring.

Answer(s): A



SCENARIO – Please use the following to answer the next question:

Singabank is a boutique bank in Singapore. After being notified during the hiring process, Singabank employees are subject to constant and thorough monitoring and tracking through CCTV cameras, computer monitoring software and keyboard loggers. Singabank does this to ensure its employees are complying with Singabank's data security policy. Bigbank is now considering acquiring Singabank's retail banking division. As part of its due diligence, Bigbank is seeking for Singabank to disclose to it all of its surveillance material on its employees, whether or not they are part of the retail banking division. Jimmy works in Singabank's investment banking division.

Assuming the monitoring was legal, can Singabank disclose Jimmy's personal data to Bigbank?

  1. No, because Jimmy is not in the division that Bigbank seeks to acquire.
  2. No, because the data was collected for the express purpose of complying with Singabank's privacy policies.
  3. Yes, if Singabank informs Jimmy of the disclosure of his personal data before it occurs.
  4. Yes, if Jimmy's personal data is necessary for Bigbank to determine whether to proceed with the acquisition.

Answer(s): C



In which of the following cases would a Singaporean be prevented from accessing information about herself from an organization?

  1. The information was collected in the previous 12 months.
  2. The information is related to an individual's credit rating.
  3. The cost of providing the information proved to be unreasonable.
  4. Any personal information about others has been deleted from the document.

Answer(s): B



Which of the following principles of the OECD guidelines and Council of European Convention principles does Singapore's PDPA incorporate?

  1. Disclosures to third parties included in access requests.
  2. Additional protections for sensitive personal data.
  3. The ability to opt-out from direct marketing.
  4. The right of deletion of data on request.

Answer(s): C


Reference:

https://ink.library.smu.edu.sg/cgi/viewcontent.cgi?article=3204&context=sol_research






Post your Comments and Discuss IAPP CIPP-A exam with other Community members:

CIPP-A Exam Discussions & Posts