CIPM Exam Questions

SCENARIO Please use the following to answer the next question: Edufox has hosted an annual convention of users of its famous e-learning software platform, and over time, it has bec...

SCENARIO Please use the following to answer the next question: Edufox has hosted an annual convention of users of its famous e-learning software platform, and over time, it has bec...

SCENARIO Please use the following to answer the next question: Edufox has hosted an annual convention of users of its famous e-learning software platform, and over time, it has bec...

SCENARIO Please use the following to answer the next question: Edufox has hosted an annual convention of users of its famous e-learning software platform, and over time, it has bec...

What is one obligation that the General Data Protection Regulation (GDPR) imposes on data processors?

An executive for a multinational online retail company in the United States is looking for guidance in developing her company's privacy program beyond what is specifically required...

What is one reason the European Union has enacted more comprehensive privacy laws than the United States?

All of the following changes will likely trigger a data inventory update EXCEPT?

SCENARIO Please use the following to answer the next question: Paul Daniels, with years of experience as a CEO, is worried about his son Carlton's successful venture, Gadgo. A tech...

SCENARIO Please use the following to answer the next question: Paul Daniels, with years of experience as a CEO, is worried about his son Carlton's successful venture, Gadgo. A tech...

Incipia Corporation just trained the last of its 300 employees on their new privacy policies and procedures. If Incipia wanted to analyze the effectiveness of the training over the...

SCENARIO Please use the following to answer the next question: Ben works in the IT department of IgNight, Inc., a company that designs lighting solutions for its clients. Although...

SCENARIO Please use the following to answer the next question: Ben works in the IT department of IgNight, Inc., a company that designs lighting solutions for its clients. Although...

SCENARIO Please use the following to answer the next question: Ben works in the IT department of IgNight, Inc., a company that designs lighting solutions for its clients. Although...

Which of the following is NOT typically a function of a Privacy Officer?

What is the main reason to begin with 3-5 key metrics during the program development process?

What is the main purpose of a privacy program audit?

Under the General Data Protection Regulation (GDPR), when would a data subject have the right to require the erasure of his or her data without undue delay?

What is the key factor that lays the foundation for all other elements of a privacy program?

SCENARIO Please use the following to answer the next question: For 15 years, Albert has worked at Treasure Box - a mail order company in the United States (U.S.) that used to sell...

SCENARIO Please use the following to answer the next question: For 15 years, Albert has worked at Treasure Box - a mail order company in the United States (U.S.) that used to sell...

SCENARIO Please use the following to answer the next question: For 15 years, Albert has worked at Treasure Box - a mail order company in the United States (U.S.) that used to sell...

SCENARIO Please use the following to answer the next question: For 15 years, Albert has worked at Treasure Box - a mail order company in the United States (U.S.) that used to sell...

SCENARIO Please use the following to answer the next question: For 15 years, Albert has worked at Treasure Box - a mail order company in the United States (U.S.) that used to sell...

SCENARIO Please use the following to answer the next question: Penny has recently joined Ace Space, a company that sells homeware accessories online, as its new privacy officer. Th...

SCENARIO Please use the following to answer the next question: For 15 years, Albert has worked at Treasure Box - a mail order company in the United States (U.S.) that used to sell...

"Collection", "access" and "destruction" are aspects of what privacy management process?

What does it mean to "rationalize" data protection requirements?

Which term describes a piece of personal data that alone may not identify an individual?

SCENARIO Please use the following to answer the next question: Your organization, the Chicago (U.S.)-based Society for Urban Greenspace, has used the same vendor to operate all asp...

SCENARIO Please use the following to answer the next question: Your organization, the Chicago (U.S.)-based Society for Urban Greenspace, has used the same vendor to operate all asp...

SCENARIO Please use the following to answer the next question: Your organization, the Chicago (U.S.)-based Society for Urban Greenspace, has used the same vendor to operate all asp...

SCENARIO Please use the following to answer the next question: Your organization, the Chicago (U.S.)-based Society for Urban Greenspace, has used the same vendor to operate all asp...

What is the function of the privacy operational life cycle?

Which is the best way to view an organization's privacy framework?

An organization is establishing a mission statement for its privacy program. Which of the following statements would be the best to use?

SCENARIO Please use the following to answer the next question: You lead the privacy office for a company that handles information from individuals living in several countries throu...

SCENARIO Please use the following to answer the next question: You lead the privacy office for a company that handles information from individuals living in several countries throu...

SCENARIO Please use the following to answer the next question: You lead the privacy office for a company that handles information from individuals living in several countries throu...

SCENARIO Please use the following to answer the next question: You lead the privacy office for a company that handles information from individuals living in several countries throu...

SCENARIO Please use the following to answer the next question: You lead the privacy office for a company that handles information from individuals living in several countries throu...

In a sample metric template, what does "target" mean?

Under which circumstances would people who work in human resources be considered a secondary audience for privacy metrics?

SCENARIO Please use the following to answer the next question: As they company's new chief executive officer, Thomas Goddard wants to be known as a leader in data protection. Godda...

SCENARIO Please use the following to answer the next question: As they company's new chief executive officer, Thomas Goddard wants to be known as a leader in data protection. Godda...

SCENARIO Please use the following to answer the next question: As they company's new chief executive officer, Thomas Goddard wants to be known as a leader in data protection. Godda...

SCENARIO Please use the following to answer the next question: As they company's new chief executive officer, Thomas Goddard wants to be known as a leader in data protection. Godda...

SCENARIO Please use the following to answer the next question: As they company's new chief executive officer, Thomas Goddard wants to be known as a leader in data protection. Godda...

Which of the following best demonstrates the effectiveness of a firm's privacy incident response process?

Which of the following is TRUE about a PIA (Privacy Impact Analysis)?