support@Free-Braindumps.com
Register Login
Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
CrowdStrike
Anthropic
All Vendors
  1. Home
  2. Exams
  3. IAPP
  4. CIPP-E

Free CIPP-E Exam Braindumps
Certified Information Privacy Professional/Europe (CIPP/E) Questions 106–110 (page: 23)

Updated On: 12-Sep-2026
Page 23 of 65
PDF with 319 Questions

An online company’s privacy practices vary due to the fact that it offers a wide variety of services. How could it best address the concern that explaining them all would make the policies incomprehensible?

  1. Use a layered privacy notice on its website and in its email communications.
  2. Identify uses of data in a privacy notice mailed to the data subject.
  3. Provide only general information about its processing activities and offer a toll-free number for more information.
  4. Place a banner on its website stipulating that visitors agree to its privacy policy and terms of use by visiting the site.

Answer(s): A


Reference:

https://ico.org.uk/media/for-organisations/documents/1595/privacy-notices-transparency-and-control-v2.pdf



The GDPR requires controllers to supply data subjects with detailed information about the processing of their data.
Where a controller obtains data directly from data subjects, which of the following items of information does NOT legally have to be supplied?

  1. The recipients or categories of recipients.
  2. The categories of personal data concerned.
  3. The rights of access, erasure, restriction, and portability.
  4. The right to lodge a complaint with a supervisory authority.

Answer(s): B


Reference:

https://gdpr-info.eu/art-13-gdpr/



According to Article 14 of the GDPR, how long does a controller have to provide a data subject with necessary privacy information, if that subject’s personal data has been obtained from other sources?

  1. As soon as possible after obtaining the personal data.
  2. As soon as possible after the first communication with the data subject.
  3. Within a reasonable period after obtaining the personal data, but no later than one month.
  4. Within a reasonable period after obtaining the personal data, but no later than eight weeks.

Answer(s): C


Reference:

https://gdpr-info.eu/art-14-gdpr/



When would a data subject NOT be able to exercise the right to portability?

  1. When the processing is necessary to perform a task in the exercise of authority vested in the controller.
  2. When the processing is carried out pursuant to a contract with the data subject.
  3. When the data was supplied to the controller by the data subject.
  4. When the processing is based on consent.

Answer(s): A


Reference:

https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/right-to-data-portability/



In which of the following situations would an individual most likely to be able to withdraw her consent for processing?

  1. When she is leaving her bank and moving to another bank.
  2. When she has recently changed jobs and no longer works for the same company.
  3. When she disagrees with a diagnosis her doctor has recorded on her records.
  4. When she no longer wishes to be sent marketing materials from an organization.

Answer(s): D


Reference:

https://gdpr-info.eu/art-7-gdpr/



  PDF
Viewing page 23 of 65
Viewing questions 111 - 115 out of 319 questions


Post your Comments and Discuss IAPP CIPP-E exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!