Free CIPP-A Exam Braindumps
Certified Information Privacy Professional/Asia (CIPP/A) Questions 36–40 (page: 9)

Updated On: 9-Feb-2026

In Hong Kong's revised Breach Guidance Note of 2015, what course of action did the Commissioner recommend that companies take immediately after experiencing a breach?

  1. Proceed under the assumption that the breach is a threat to personal safety.
  2. Enlist the aid of law enforcement to determine the cause of the breach.
  3. Quickly issue a notification to the data subjects affected by the breach.
  4. Immediately gather essential information in relation to the breach.

Answer(s): B


Reference:

https://www.pcpd.org.hk/english/resources_centre/publications/files/DataBreachHandling2015_e.pdf



How was the Supreme Court's ruling in the Maneka Gandhi v Union of India case significant to Indian law?

  1. It expanded the interpretation of right to life under Article 21 of the Constitution.
  2. It established that privacy is a fundamental right granted by the Constitution under Article 21.
  3. It upheld that the impounding of passports for "public interest" is allowable under Section 10(3)(c) of the Passports Act.
  4. It ruled that under Article 32 of the Constitution individuals may file writ petitions when they feel their rights were violated.

Answer(s): D


Reference:

https://www.casemine.com/judgement/in/5609abd1e4b014971140d6b0



Which of the following entities do NOT fall under India's Right to Information Act of 2005?

  1. High courts.
  2. State legislatures.
  3. Law enforcement agencies.
  4. National Security Guard.

Answer(s): D


Reference:

https://cic.gov.in/sites/default/files/Section%2024%20of%20the%20RTI%20Act%20-%20Ankur%20Mishra.pdf (9)



In India, the obligation to appoint a Grievance Officer applies ONLY to companies that?

  1. Deal with sensitive personal data.
  2. Conduct cross-border data transfers.
  3. Are considered part of the public sector.
  4. Lack alternate enforcement mechanisms.

Answer(s): A


Reference:

https://taxguru.in/corporate-law/compliance-relation-appointment-grievance-officer-provisions-information-technology-act-2000.html



Section 43A of India's IT Rules 2011 requires which of the following for a privacy policy?

  1. It should be available and produced on request.
  2. It should be published on the website of the body corporate.
  3. It should be emailed or faxed to data providers by the body corporate.
  4. It should be shown to the data provider at the time of data collection.

Answer(s): A


Reference:

https://www.mondaq.com/india/privacy-protection/904916/a-review-of-the-information-technology-rules-2011-



Viewing page 9 of 19
Viewing questions 41 - 45 out of 93 questions


Post your Comments and Discuss IAPP CIPP-A exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!