Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
Splunk
ServiceNow
All Vendors
  2. Home
  3. Exams
  4. IAPP
  5. CIPP-US

IAPP CIPP-US Exam
Certified Information Privacy Professional/United States (CIPP/US) (Page 7 )

Updated On: 9-Feb-2026
Page 7 of 52
PDF with 251 Questions

In which situation is a company operating under the assumption of implied consent?

  1. An employer contacts the professional references provided on an applicant's resume
  2. An online retailer subscribes new customers to an e-mail list by default
  3. A landlord uses the information on a completed rental application to run a credit report
  4. A retail clerk asks a customer to provide a zip code at the check-out counter

Answer(s): A


Reference:

https://en.wikipedia.org/wiki/Implied_consent



All of the following are tasks in the "Discover" phase of building an information management program EXCEPT?

  1. Facilitating participation across departments and levels
  2. Developing a process for review and update of privacy policies
  3. Deciding how aggressive to be in the use of personal information
  4. Understanding the laws that regulate a company's collection of information

Answer(s): D



Which of the following describes the most likely risk for a company developing a privacy policy with standards that are much higher than its competitors?

  1. Being more closely scrutinized for any breaches of policy
  2. Getting accused of discriminatory practices
  3. Attracting skepticism from auditors
  4. Having a security system failure

Answer(s): A



If an organization certified under Privacy Shield wants to transfer personal data to a third party acting as an agent, the organization must ensure the third party does all of the following EXCEPT?

  1. Uses the transferred data for limited purposes
  2. Provides the same level of privacy protection as the organization
  3. Notifies the organization if it can no longer meet its requirements for proper data handling
  4. Enters a contract with the organization that states the third party will process data according to the consent agreement

Answer(s): D


Reference:

https://www.privacyshield.gov/Key-New-Requirements



What was the original purpose of the Federal Trade Commission Act?

  1. To ensure privacy rights of U.S. citizens
  2. To protect consumers
  3. To enforce antitrust laws
  4. To negotiate consent decrees with companies violating personal privacy

Answer(s): C






Post your Comments and Discuss IAPP CIPP-US exam prep with other Community members:

Join the CIPP-US Discussion