Free CIPP-US Exam Braindumps
Certified Information Privacy Professional/United States (CIPP/US) Questions 101–105 (page: 22)

Updated On: 10-Feb-2026

What type of material is exempt from an individual's right to disclosure under the Privacy Act?

  1. Material required by statute to be maintained and used solely for research purposes.
  2. Material reporting investigative efforts to prevent unlawful persecution of an individual.
  3. Material used to determine potential collaboration with foreign governments in negotiation of trade deals.
  4. Material reporting investigative efforts pertaining to the enforcement of criminal law.

Answer(s): B



Which of the following best describes an employer's privacy-related responsibilities to an employee who has left the workplace?

  1. An employer has a responsibility to maintain a former employee's access to computer systems and company data needed to support claims against the company, such as discrimination.
  2. An employer has a responsibility to permanently delete or expunge all sensitive employment records to minimize privacy risks to both the employer and former employee.
  3. An employer may consider any privacy-related responsibilities terminated, as the relationship between employer and employee is considered primarily contractual.
  4. An employer has a responsibility to maintain the security and privacy of any sensitive employment records retained for a legitimate business purpose.

Answer(s): D



All of the following common law torts are relevant to employee privacy under US law EXCEPT?

  1. Infliction of emotional distress.
  2. Intrusion upon seclusion.
  3. Defamation
  4. Conversion.

Answer(s): D



Which law provides employee benefits, but often mandates the collection of medical information?

  1. The Occupational Safety and Health Act.
  2. The Americans with Disabilities Act.
  3. The Employee Medical Security Act.
  4. The Family and Medical Leave Act.

Answer(s): D



In August of 2021, John, a California resident, receives notification that a major corporation with $500 million in annual revenue has experienced a data breach. John's personal information has been stolen, including his full name and social security number. John also learns that the corporation did not have reasonable cybersecurity measures in place to safeguard his personal information.

Which of the following statements most accurately reflects John's ability to pursue a legal claim against the corporation under the California Consumer Privacy Act (CCPA)?

  1. John has no right to sue the corporation because the CCPA does not address any data breach rights.
  2. John cannot sue the corporation for the data breach because only the state's Attorney General has authority to file suit under the CCPA.
  3. John can sue the corporation for the data breach but only to recover monetary damages he actually suffered as a result of the data breach.
  4. John can sue the corporation for the data breach to recover monetary damages suffered as a result of the data breach, and in some circumstances seek statutory damages irrespective of whether he suffered any financial harm.

Answer(s): D



Viewing page 22 of 52
Viewing questions 106 - 110 out of 283 questions


Post your Comments and Discuss IAPP CIPP-US exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!