Free CIPP-E Exam Braindumps
Certified Information Privacy Professional/Europe (CIPP/E) Questions 101–105 (page: 22)

Updated On: 12-Sep-2026

Under Article 9 of the GDPR, which of the following categories of data is NOT expressly prohibited from data processing?

  1. Personal data revealing ethnic origin.
  2. Personal data revealing genetic information.
  3. Personal data revealing financial information.
  4. Personal data revealing trade union membership.

Answer(s): C


Reference:

https://www.privacy-regulation.eu/en/article-9-processing-of-special-categories-of-personal-data-GDPR.htm#:~:text=Processing%20of%20personal%20data%20revealing,concerning%20a%20natural% 20person%27s%20sex



When does the GDPR provide more latitude for a company to process data beyond its original collection purpose?

  1. When the data has been pseudonymized.
  2. When the data is protected by technological safeguards.
  3. When the data serves legitimate interest of third parties.
  4. When the data subject has failed to use a provided opt-out mechanism.

Answer(s): A



In which situation would a data controller most likely be able to justify the processing of the data of a child without parental consent?

  1. When the data is to be processed for market research.
  2. When providing preventive or counselling services to the child.
  3. When providing the child with materials purely for educational use.
  4. When a legitimate business interest makes obtaining consent impractical.

Answer(s): B



According to the GDPR, when should the processing of photographs be considered processing of special categories of personal data?

  1. When processed with the intent to publish information regarding a natural person on publicly accessible media.
  2. When processed with the intent to proceed to scientific or historical research projects.
  3. When processed with the intent to uniquely identify or authenticate a natural person.
  4. When processed with the intent to comply with a law.

Answer(s): C


Reference:

https://gdpr-info.eu/recitals/no-51/#:~:text=The%20processing%20of%20photographs% 20should,authentication%20of%20a%20natural%20person



Which GDPR principle would a Spanish employer most likely depend upon to annually send the personal data of its employees to the national tax authority?

  1. The consent of the employees.
  2. The legal obligation of the employer.
  3. The legitimate interest of the public administration.
  4. The protection of the vital interest of the employees.

Answer(s): B


Reference:

https://www.huntonprivacyblog.com/2020/03/25/spanish-dpa-publishes-report-on-data-processing-activities-in-relation-to-covid-19/



Viewing page 22 of 65
Viewing questions 106 - 110 out of 319 questions


Post your Comments and Discuss IAPP CIPP-E exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!