Free IAPP CIPP-US Exam Questions

Become IAPP Certified with updated CIPP-US exam questions and correct answers

Page: 1 / 41

Total 201 Questions | Updated On: Mar 12, 2026

Add To Cart

Question 1

Which of the following would NOT be considered a method of obtaining verifiable parental consent before collecting, using or disclosing personal information from children under the Children’s Online Privacy Protection Act (COPPA) of 1998?

A : ing a credit card, debit card, or other online payment system

B : ving the parent call a toll-free telephone number staffed by trained personnel.

C : Having the parent sign a consent form and return it to the operator by postal mail, facsimile, or electronic scan.

D : nding a text message to the parent explaining the intended uses of the information.

Answer: D

Question 2

Under the Fair Credit Reporting Act (FCRA), what must a person who is denied employment based upon his credit history receive?

A : prompt notification from the employer

B : opportunity to reapply with the employer.

C : formation from several consumer reporting agencies (CRAs).

D : A list of rights from the Consumer Financial Protection Bureau (CFPB).

Answer: A

Question 3

When does the Telemarketing Sales Rule require an entity to share a do-not-call request across its organization?

A : en the operational structures of its divisions are not transparent

B : en the goods and services sold by its divisions are very similar

C : en a call is not the result of an error or other unforeseen cause

D : en the entity manages user preferences through multiple platforms

Answer: C

Question 4

Which jurisdiction must courts have in order to hear a particular case?

A : bject matter jurisdiction and regulatory jurisdiction

B : bject matter jurisdiction and professional jurisdiction

C : rsonal jurisdiction and subject matter jurisdiction

D : rsonal jurisdiction and professional jurisdiction

Answer: C

Question 5

An organization self-certified under Privacy Shield must, upon request by an individual, do what?

A : pend the use of all personal information collected by the organization to fulfill its original purpose

B : ovide the identities of third parties with whom the organization shares personal information.

C : ovide the identities of third and fourth parties that may potentially receive personal information

D : Identify all personal information disclosed during a criminal investigation

Answer: B

Page: 1 / 41

Total 201 Questions | Updated On: Mar 12, 2026

Add To Cart