Online CIPP-A Test Brain Dump Question and Test Engine
Real IAPP CIPP-A Exam Dumps with Correct 92 Questions and Answers
NEW QUESTION 23
In enforcement cases, what is Singapore's Personal Data Protection Commission (PDPC) obligated to do?
- A. Publish the name of an organization named in a complaint.
- B. Intervene in civil actions to provide assistance to complainants.
- C. Provide the complainant with a way to appeal a decision.
- D. Publish the decisions it makes regarding complaints.
Answer: C
NEW QUESTION 24
What clarification did India make in a 2011 Press Note regarding their Sensitive Personal Data Rules?
- A. That sensitive personal data or information includes passwords, financial information, medical records, and
- B. That the rules apply to data subjects located outside of India.
- C. That the data processor must provide notice to the data subject before data is processed.
- D. That the rules apply to persons or companies collecting sensitive data within India.
Answer: A
Explanation:
biometric information.
NEW QUESTION 25
What emerged as the main reason for creating a comprehensive data protection law when Singapore ministers met between 2005 and 2011?
- A. To enhance Singapore's economic competitiveness.
- B. To control increasing technological threats.
- C. To limit the scope of governmental surveillance.
- D. To raise Singapore's human rights standing.
Answer: A
NEW QUESTION 26
In Hong Kong's revised Breach Guidance Note of 2015, what course of action did the Commissioner recommend that companies take immediately after experiencing a breach?
- A. Immediately gather essential information in relation to the breach.
- B. Enlist the aid of law enforcement to determine the cause of the breach.
- C. Proceed under the assumption that the breach is a threat to personal safety.
- D. Quickly issue a notification to the data subjects affected by the breach.
Answer: B
Explanation:
Reference:
https://www.pcpd.org.hk/english/resources_centre/publications/files/ DataBreachHandling2015_e.pdf
https://www.pcpd.org.hk/english/resources_centre/publications/files/ DataBreachHandling2015_e.pdf
NEW QUESTION 27
All of the following are guidelines the PDPC gives about anonymised data EXCEPT?
- A. Any data that has been anonymised bears the same risks for re-identification.
- B. Data that has been anonymised satisfies the "cease to retain" requirement of Section 25.
- C. Anonymised data is not personal data.
- D. Organizations should consider the risk of re-identification if it intends to publish or disclose anonymised data.
Answer: B
Explanation:
Reference:
https://www.pdpc.gov.sg/-/media/Files/PDPC/New_DPO_Connect/nov_15/pdf/Anonymisation.pdf
NEW QUESTION 28
In which of the following cases would a Singaporean be prevented from accessing information about herself from an organization?
- A. The information was collected in the previous 12 months.
- B. The information is related to an individual's credit rating.
- C. The cost of providing the information proved to be unreasonable.
- D. Any personal information about others has been deleted from the document.
Answer: B
NEW QUESTION 29
SCENARIO - Please use the following to answer the next QUESTION:
Singabank is a boutique bank in Singapore. After being notified during the hiring process, Singabank employees are subject to constant and thorough monitoring and tracking through CCTV cameras, computer monitoring software and keyboard loggers. Singabank does this to ensure its employees are complying with Singabank's data security policy. Bigbank is now considering acquiring Singabank's retail banking division. As part of its due diligence, Bigbank is seeking for Singabank to disclose to it all of its surveillance material on its employees, whether or not they are part of the retail banking division. Jimmy works in Singabank's investment banking division.
Assuming the monitoring was legal, can Singabank disclose Jimmy's personal data to Bigbank?
- A. No, because the data was collected for the express purpose of complying with Singabank's privacy policies.
- B. Yes, if Singabank informs Jimmy of the disclosure of his personal data before it occurs.
- C. No, because Jimmy is not in the division that Bigbank seeks to acquire.
- D. Yes, if Jimmy's personal data is necessary for Bigbank to determine whether to proceed with the acquisition.
Answer: B
NEW QUESTION 30
Which European-influenced safeguard was NOT included in Hong Kong or Singapore's personal data protection acts, but was subsequently adopted as a consideration in regulatory guidelines?
- A. Additional protection for sensitive personal data.
- B. Notice requirements when data is collected from third parties.
- C. Controls on automated decision making.
- D. Legitimate interest as a legal basis for processing.
Answer: B
NEW QUESTION 31
In 2013-14, the Indian Supreme Court ruled in Puttaswamy v Union of India that requiring a Unique Identification Number was unconstitutional if what?
- A. It was used to gather information to discriminate against minorities.
- B. It was restricted to residents of India.
- C. It was necessary for proving citizenship.
- D. It was required in order to obtain government services.
Answer: B
NEW QUESTION 32
SCENARIO - Please use the following to answer the next QUESTION:
Delilah is seeking employment in the marketing department of Good Mining Private Limited, an industry leader in drilling mines in Singapore. Delilah, while filling in the standard paper application form, is asked to provide details about emergency contacts, medical history, blood type and her insurance policy. These fields need to be filled in no matter which department Delilah applies to. The form also asks Delilah to expressly consent to the collection, use and disclosure of her personal data.
A week after submitting the form, Delilah is invited by Evan, the Director of Marketing at Good Mining, to coffee. Just before Delilah leaves, she gives her business card containing her current business contact information to Evan. Evan then uses the business card to add Delilah's details to Good Mining's business development database, which is kept on a local server. Good Mining uses the database to inform people about networking and client events that Good Mining organizes.
Why is Good Mining Private's standard form NOT compliant with Singapore's data protection law?
- A. It does not contain the contact information for the HR manager.
- B. It asks for details that are not relevant to the job Delilah is applying for.
- C. It asks for Delilah's consent to use and disclose her personal data.
- D. It is not available in an electronic format.
Answer: B
NEW QUESTION 33
In India's IT Rules 2011, which is included in the definition of "sensitive personal data"?
- A. IP addresses.
- B. Next of kin.
- C. Sexual Orientation.
- D. Tax records.
Answer: C
NEW QUESTION 34
Hong Kong's New Guidance on Direct Marketing clarified that direct marketing rules under the new regime do NOT apply if what condition exists?
- A. The data subject has already given consent for other services offered by the company.
- B. The products or services are being offered for the exclusive use of an individual's organization.
- C. The data subject's personal data is collected from public registers or third parties.
- D. The products or services are being offered by the organization's parent company.
Answer: A
NEW QUESTION 35
How can the privacy principles issued in 1980 by the Organisation for Economic Cooperation and Development (OECD) be defined?
- A. Mandatory rules governing the protection of privacy and trans-border data flows among binding member states.
- B. Guidelines governing the protection of privacy and trans-border data flows issued in collaboration with the Federal Trade Commission.
- C. Guidelines governing the protection of privacy and trans-border data flows of personal data in states that are members.
- D. Mandatory rules governing the protection of privacy and trans-border data flows within the European Union.
Answer: C
NEW QUESTION 36
What was the basis for the "TrustSg" mark, which was designed to build confidence in e-commerce transactions before the PDPA was enacted?
- A. The 1995 European Directive.
- B. The Fair Information Practice Principles.
- C. The Model Data Protection Code.
- D. The Electronic Transactions Act.
Answer: C
Explanation:
Reference:
https://static1.squarespace.com/static/5746cdb3f699bb4f603243c8/ t/575f5443a3360c785eab4cc2/1465865429526/china.pdf (21)
NEW QUESTION 37
What personal information is considered sensitive in almost all countries with privacy laws?
- A. Marital status.
- B. Health information.
- C. Criminal convictions.
- D. Employment history.
Answer: B
NEW QUESTION 38
Increases in which of the following were a major reason for the enactment of Hong Kong's Amendment Ordinance in 2012?
- A. Biometric authentication.
- B. Direct marketing practices.
- C. Data breach reports.
- D. Law enforcement requests.
Answer: B
NEW QUESTION 39
In the Asia-Pacific Economic Cooperation (APEC) Privacy Framework, what exception is allowed to the Access and Correction principle?
- A. Paper-based records.
- B. Unreasonable expense.
- C. Foreign intelligence.
- D. Publicly-available information.
Answer: D
Explanation:
Reference:
https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=&ved=2ahUKEwj5zqzzs_jwAhXDRBUIHUjACjcQFjAAegQIBhAD&url =https%3A%2F%2Fwww.apec.org%2F-%2Fmedia%2FAPEC%2FPublications%2F2005%2F12%2FAPEC- Privacy-Framework%2F05_ecsg_privacyframewk.pdf&usg=AOvVaw0O1-P2AWJ-BA0TYPGcIJgD
=https%3A%2F%2Fwww.apec.org%2F-%2Fmedia%2FAPEC%2FPublications%2F2005%2F12%2FAPEC- Privacy-Framework%2F05_ecsg_privacyframewk.pdf&usg=AOvVaw0O1-P2AWJ-BA0TYPGcIJgD
https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=&ved=2ahUKEwj5zqzzs_jwAhXDRBUIHUjACjcQFjAAegQIBhAD&url =https%3A%2F%2Fwww.apec.org%2F-%2Fmedia%2FAPEC%2FPublications%2F2005%2F12%2FAPEC- Privacy-Framework%2F05_ecsg_privacyframewk.pdf&usg=AOvVaw0O1-P2AWJ-BA0TYPGcIJgD
NEW QUESTION 40
Which control is NOT included in the requirements established by the Monetary Authority of Singapore (MAS) for financial institutions in order to deter money-laundering and financial aid to terrorism (AML/CFT)?
- A. Identifying and knowing customers.
- B. Monitoring and reporting suspicious financial transactions.
- C. Conducting regular reviews of customer accounts.
- D. Sharing personal information with the PDPC.
Answer: A
Explanation:
Reference:
https://www.mas.gov.sg/-/media/MAS/Regulations-and-Financial-Stability/Regulatory-and-Supervisory-Framework/Anti_Money-Laundering_Countering-the-Financing-of-Terrorism/Guidance-for- Effective-AML-CFT-Transaction-Monitoring-Controls.pdf (page 3)
https://www.mas.gov.sg/-/media/MAS/Regulations-and-Financial-Stability/Regulatory-and-Supervisory-Framework/Anti_Money-Laundering_Countering-the-Financing-of-Terrorism/Guidance-for- Effective-AML-CFT-Transaction-Monitoring-Controls.pdf (page 3)
NEW QUESTION 41
......
Valid CIPP-A Test Answers & IAPP CIPP-A Exam PDF: https://www.dumpstillvalid.com/CIPP-A-prep4sure-review.html
IAPP CIPP-A Certification Real 2021 Mock Exam: https://drive.google.com/open?id=1cz7yX0MvG2PcNwzMkTUqUQLpjcr2r8-1
