Free CIPP-E Exam Braindumps
Certified Information Privacy Professional/Europe (CIPP/E) Questions 96–100 (page: 21)

Updated On: 12-Sep-2026

After leaving the EU under the terms of Brexit, the United Kingdom will seek an adequacy determination.
What is the reason for this?

  1. The Insurance Commissioner determined that an adequacy determination is required by the Data
    Protection Act.
  2. Adequacy determinations automatically lapse when a Member State leaves the EU.
  3. The UK is now a third country because it’s no longer subject to the GDPR.
  4. The UK is less trustworthy now that its not part of the Union.

Answer(s): C


Reference:

https://www.euractiv.com/section/digital/news/commission-must-refuse-uk-data-adequacy-rights-group-says/



To which of the following parties does the territorial scope of the GDPR NOT apply?

  1. All member countries of the European Economic Area.
  2. All member countries party to the Treaty of Lisbon.
  3. All member countries party to the Paris Agreement.
  4. All member countries of the European Union.

Answer(s): C


Reference:

https://gdpr-info.eu/chapter-3/territorial-scope/



What must a data controller do in order to make personal data pseudonymous?

  1. Separately hold any information that would allow linking the data to the data subject.
  2. Encrypt the data in order to prevent any unauthorized access or modification.
  3. Remove all indirect data identifiers and dispose of them securely.
  4. Use the data only in aggregated form for research purposes.

Answer(s): A


Reference:

https://en.wikipedia.org/wiki/Pseudonymization



Which of the following entities would most likely be exempt from complying with the GDPR?

  1. A South American company that regularly collects European customers’ personal data.
  2. A company that stores all customer data in Australia and is headquartered in a European Union (EU)
    member state.
  3. A Chinese company that has opened a satellite office in a European Union (EU) member state to service
    European customers.
  4. A North American company servicing customers in South Africa that uses a cloud storage system made by a European company.

Answer(s): D



Article 29 Working Party has emphasized that the GDPR forbids “forum shopping”, which occurs when companies do what?

  1. Choose the data protection officer that is most sympathetic to their business concerns.
  2. Designate their main establishment in member state with the most flexible practices.
  3. File appeals of infringement judgments with more than one EU institution simultaneously.
  4. Select third-party processors on the basis of cost rather than quality of privacy protection.

Answer(s): B


Reference:

https://gdprinformer.com/gdpr-articles/forum-shopping-illegal-gdpr



Viewing page 21 of 65
Viewing questions 101 - 105 out of 319 questions


Post your Comments and Discuss IAPP CIPP-E exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!