Free IAPP CIPP-US Exam Questions

Become IAPP Certified with updated CIPP-US exam questions and correct answers

Page: 1 / 41

Total 201 Questions | Updated On: Apr 15, 2026

Add To Cart

Question 1

A company based in United States receives information about its UK subsidiary’s employees in connection with

the centralized HR service it provides.

How can the UK company ensure an adequate level of data protection that would allow the restricted data

transfer to continue?

A : signing up to an approved code of conduct under UK GDPR to demonstrate compliance with its requirements, both for the parent and the subsidiary companies

B : revising the contract with the United States parent company incorporating EU SCCs, as it continues to be valid for restricted transfers under the UK regime

C : By submitting to the ICO a new application for the UK BCRs using the UK BCR application forms, as their existing authorized EU BCRs are not recognized.

D : allowing each employee the option to opt-out to the restricted transfer, as it is necessary to send their names in order to book the sales bonuses.

Answer: B

Question 2

What privacy concept grants a consumer the right to view and correct errors on his or her credit report?

A : cess

B : tice

C : tion

D : oice

Answer: B

Question 3

What is the main purpose of the Global Privacy Enforcement Network (GPEN)?

A : promote universal cooperation among privacy authorities

B : investigate allegations of privacy violations internationally

C : protect the interests of privacy consumer groups worldwide

D : arbitrate disputes between countries over jurisdiction for privacy laws

Answer: A

Question 4

What consumer protection did the Fair and Accurate Credit Transactions Act (FACTA) require?

A : ability for the consumer to correct inaccurate credit report information

B : truncation of account numbers on credit card receipts

C : right to request removal from e-mail lists

D : nsumer notice when third-party data is used to make an adverse decision

Answer: A

Question 5

Which of the following is NOT a principle found in the APEC Privacy Framework?

A : tegrity of Personal Information.

B : cess and Correction.

C : eventing Harm

D : ivacy by Design.

Answer: D

Page: 1 / 41

Total 201 Questions | Updated On: Apr 15, 2026

Add To Cart