Free IAPP CIPP-US Exam Questions

Become IAPP Certified with updated CIPP-US exam questions and correct answers

Page: 1 / 41

Total 201 Questions | Updated On: Dec 08, 2025

Add To Cart

Question 1

Mega Corp. is a U.S.-based business with employees in California, Virginia, and Colorado. Which of the following must Mega Corp. comply with in regard to its human resources data?

A : lifornia Privacy Rights Act.

B : lifornia Privacy Rights Act and Virginia Consumer Data Protection Act.

C : lifornia Privacy Rights Act and Colorado Privacy Act.

D : lifornia Privacy Rights Act, Virginia Consumer Data Protection Act, and Colorado Privacy Act.

Answer: D

Question 2

All of the following organizations are specified as covered entities under the Health Insurance Portability and Accountability Act (HIPAA) EXCEPT?

A : althcare information clearinghouses

B : armaceutical companies

C : althcare providers

D : alth plans

Answer: B

Question 3

A company based in United States receives information about its UK subsidiary’s employees in connection with

the centralized HR service it provides.

How can the UK company ensure an adequate level of data protection that would allow the restricted data

transfer to continue?

A : signing up to an approved code of conduct under UK GDPR to demonstrate compliance with its requirements, both for the parent and the subsidiary companies

B : revising the contract with the United States parent company incorporating EU SCCs, as it continues to be valid for restricted transfers under the UK regime

C : By submitting to the ICO a new application for the UK BCRs using the UK BCR application forms, as their existing authorized EU BCRs are not recognized.

D : allowing each employee the option to opt-out to the restricted transfer, as it is necessary to send their names in order to book the sales bonuses.

Answer: B

Question 4

Which of the following describes the most likely risk for a company developing a privacy policy with standards that are much higher than its competitors?

A : ing more closely scrutinized for any breaches of policy

B : tting accused of discriminatory practices

C : tracting skepticism from auditors

D : ving a security system failure

Answer: A

Question 5

Edward Snowden’s revelations regarding government programs collecting massive amounts of information about U.S. citizens and noncitizens led to the passage of which law?

A : bersecurity Information Sharing Act of 2015

B : reign Intelligence Surveillance Act

C : USA FREEDOM Act

D : OUD Act

Answer: C

Page: 1 / 41

Total 201 Questions | Updated On: Dec 08, 2025

Add To Cart