support@Free-Braindumps.com
Register Login
Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
CrowdStrike
Anthropic
All Vendors
  1. Home
  2. Exams
  3. IAPP
  4. CIPP-E

Free CIPP-E Exam Braindumps
Certified Information Privacy Professional/Europe (CIPP/E) Questions 136–140 (page: 29)

Updated On: 12-Sep-2026
Page 29 of 65
PDF with 319 Questions

Which GDPR requirement will present the most significant challenges for organizations with Bring Your Own Device (BYOD) programs?

  1. Data subjects must be sufficiently informed of the purposes for which their personal data is processed.
  2. Processing of special categories of personal data on a large scale requires appointing a DPO.
  3. Personal data of data subjects must always be accurate and kept up to date.
  4. Data controllers must be in control of the data they hold at all times.

Answer(s): D



A company in France suffers a robbery over the weekend owing to a faulty alarm system.
When it is determined that the break-in involves the loss of a substantial amount of data, the company decides on a CCTV system to monitor for future incidents. Company technicians install cameras in the entrance of the building, hallways and offices. Footage is recorded continuously, and is monitored by the home office in the United States.
What is the most realistic step the company could take to address their security concerns and comply with the personal data processing principles set out in Article 5 of the GDPR?

  1. Seek informed consent from company employees.
  2. Have cameras recording during work hours only.
  3. Retain captured footage for no more than 30 days.
  4. Restrict camera placement to building entrances only.

Answer(s): D



Which of the following is an example of direct marketing that would be subject to European data protection laws?

  1. An updated privacy notice sent to an individual’s personal email address.
  2. A charity fundraising event notice sent to an individual at her business address.
  3. A service outage notification provided to an individual by recorded telephone message.
  4. A revision of contract terms conveyed to an individual by SMS from a marketing organization.

Answer(s): B


Reference:

https://gdpr-info.eu/art-13-gdpr/



Article 9 of the GDPR lists exceptions to the general prohibition against processing biometric data.
Which of the following is NOT one of these exceptions?

  1. The processing is done by a non-profit organization and the results are disclosed outside the organization.
  2. The processing is necessary to protect the vital interests of the data subject when he or she is incapable of giving consent.
  3. The processing is necessary for the establishment, exercise or defense of legal claims when courts are acting in a judicial capacity.
  4. The processing is explicitly consented to by the data subject and he or she is allowed by Union or Member
    State law to lift the prohibition.

Answer(s): A


Reference:

https://dataprivacymanager.net/sensitive-personal-data-special-category-under-the-gdpr/



Which marketing-related activity is least likely to be covered by the provisions of Privacy and Electronic Communications Regulations (Directive 2002/58/EC)?

  1. Advertisements passively displayed on a website.
  2. The use of cookies to collect data about an individual.
  3. A text message to individuals from a company offering concert tickets for sale.
  4. An email from a retail outlet promoting a sale to one of their previous customer.

Answer(s): A



  PDF
Viewing page 29 of 65
Viewing questions 141 - 145 out of 319 questions


Post your Comments and Discuss IAPP CIPP-E exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!