Free IAPP CIPP-US Exam Questions

Become IAPP Certified with updated CIPP-US exam questions and correct answers

Page: 1 / 41

Total 201 Questions | Updated On: Apr 01, 2026

Add To Cart

Question 1

Which statement is FALSE regarding the provisions of the Employee Polygraph Protection Act of 1988 (EPPA)?

A : EPPA requires that employers post essential information about the Act in a conspicuous location

B : EPPA includes an exception that allows polygraph tests in professions in which employee honesty is necessary for public safety.

C : ployers are prohibited from administering psychological testing based on personality traits such as honesty, preferences or habits.

D : ployers involved in the manufacture of controlled substances may terminate employees based on polygraph results if other evidence exists

Answer: C

Question 2

What consumer protection did the Fair and Accurate Credit Transactions Act (FACTA) require?

A : ability for the consumer to correct inaccurate credit report information

B : truncation of account numbers on credit card receipts

C : right to request removal from e-mail lists

D : nsumer notice when third-party data is used to make an adverse decision

Answer: A

Question 3

Which of the following is most likely to provide privacy protection to private-sector employees in the United States?

A : ate law, contract law, and tort law

B : Federal Trade Commission Act (FTC Act)

C : endments one, four, and five of the U.S. Constitution

D : U.S. Department of Health and Human Services (HHS)

Answer: A

Question 4

Mega Corp. is a U.S.-based business with employees in California, Virginia, and Colorado. Which of the following must Mega Corp. comply with in regard to its human resources data?

A : lifornia Privacy Rights Act.

B : lifornia Privacy Rights Act and Virginia Consumer Data Protection Act.

C : lifornia Privacy Rights Act and Colorado Privacy Act.

D : lifornia Privacy Rights Act, Virginia Consumer Data Protection Act, and Colorado Privacy Act.

Answer: D

Question 5

An organization self-certified under Privacy Shield must, upon request by an individual, do what?

A : pend the use of all personal information collected by the organization to fulfill its original purpose

B : ovide the identities of third parties with whom the organization shares personal information.

C : ovide the identities of third and fourth parties that may potentially receive personal information

D : Identify all personal information disclosed during a criminal investigation

Answer: B

Page: 1 / 41

Total 201 Questions | Updated On: Apr 01, 2026

Add To Cart