support@Free-Braindumps.com
Register Login
Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
CrowdStrike
Anthropic
All Vendors
  1. Home
  2. Exams
  3. IAPP
  4. CIPP-E

Free CIPP-E Exam Braindumps
Certified Information Privacy Professional/Europe (CIPP/E) Questions 131–135 (page: 28)

Updated On: 12-Sep-2026
Page 28 of 65
PDF with 319 Questions

Which of the following is one of the supervisory authority’s investigative powers?

  1. To notify the controller or the processor of an alleged infringement of the GDPR.
  2. To require that controllers or processors adopt approved data protection certification mechanisms.
  3. To determine whether a controller or processor has the right to a judicial remedy concerning a compensation decision made against them.
  4. To require data controllers to provide them with written notification of all new processing activities.

Answer(s): A


Reference:

https://gdpr-info.eu/art-58-gdpr/



Many businesses print their employees’ photographs on building passes, so that employees can be identified by security staff. This is notwithstanding the fact that facial images potentially qualify as biometric data under the GDPR.
Why would such practice be permitted?

  1. Because use of biometric data to confirm the unique identification of data subjects benefits from an exemption.
  2. Because photographs qualify as biometric data only when they undergo a “specific technical processing”.
  3. Because employees are deemed to have given their explicit consent when they agree to be photographed by their employer.
  4. Because photographic ID is a physical security measure which is “necessary for reasons of substantial public interest”.

Answer(s): B



A worker in a European Union (EU) member state has ceased his employment with a company.
What should the employer most likely do in regard to the worker’s personal data?

  1. Destroy sensitive information and store the rest per applicable data protection rules.
  2. Store all of the data in case the departing worker makes a subject access request.
  3. Securely store the data that is required to be kept under local law.
  4. Provide the employee the reasons for retaining the data.

Answer(s): C


Reference:

https://gdpr-info.eu/art-17-gdpr/



Which of the following is NOT a role of works councils?

  1. Determining the monetary fines to be levied against employers for data breach violations of employee data.
  2. Determining whether to approve or reject certain decisions of the employer that affect employees.
  3. Determining whether employees’ personal data can be processed or not.
  4. Determining what changes will affect employee working conditions.

Answer(s): A



Under the Data Protection Law Enforcement Directive of the EU, a government can carry out covert investigations involving personal data, as long it is set forth by law and constitutes a measure that is both necessary and what?

  1. Prudent.
  2. Important.
  3. Proportionate.
  4. DPA-approved.

Answer(s): C


Reference:

https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32006L0024



  PDF
Viewing page 28 of 65
Viewing questions 136 - 140 out of 319 questions


Post your Comments and Discuss IAPP CIPP-E exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!