Logo ExamsQA
Exit
Official Bank 0/242

Certified Information Privacy Manager Exam (CIPM) - IAPP Exam Questions

Last updated on July 22, 2026

97% Exam Compliance
242 Total Questions
1
Question
An organization's privacy officer was just notified by the benefits manager that she accidentally sent out the retirement enrollment report of all employees to a wrong vendor.

Which of the following actions should the privacy officer take first?
Options
A Contact the recipient to delete the email.
B Report the incident to law enforcement.
C Send firm-wide email notification to employees.
D Perform a risk of harm analysis.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

2
Question
Which of the following information must be provided by the data controller when complying with GDPR “right to be informed” requirements?
Options
A The contact details of the Data Protection Officer (DPO).
B The data subject’s right to withdraw consent
C The name of any organizations with whom personal data was shared.
D The purpose of personal data processing.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

3
Question
Which is TRUE about the scope and authority of data protection oversight authorities?
Options
A No one agency officially oversees the enforcement of privacy regulations in the United States.
B All authority in the European Union rests with the Data Protection Commission (DPC).
C The Asia-Pacific Economic Cooperation (APEC) Privacy Frameworks require all member nations to designate a national data protection authority.
D The Office of the Privacy Commissioner (OPC) of Canada has the right to impose financial sanctions onviolators.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

4
Question
The main reason the response to this incident should be integrated into the Business Continuity Plan (BCP) is because?
Options
A Major stakeholders are involved from every critical area of the business.
B The need for retraining employees will be paramount.
C The impact on the company's competitive advantage is potentially significant.
D The repercussions for the company could have significant environmental impacts.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

5
Question
Under the General Data Protection Regulation (GDPR), when would a data subject have the right to require the erasure of his or her data without undue delay?
Options
A When the processing is carried out by automated means.
B When the erasure is in the public interest.
C When the data is no longer necessary for its original purpose.
D When the data subject is a public authority.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

Finish Practice?

Are you sure you want to finish? This will end your practice session.