Spring Sale Special Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: buysanta

Exact2Pass Menu

Certified Information Privacy Professional/Asia (CIPP/A)

Last Update 21 hours ago Total Questions : 90

The Certified Information Privacy Professional/Asia (CIPP/A) content is now fully updated, with all current exam questions added 21 hours ago. Deciding to include CIPP-A practice exam questions in your study plan goes far beyond basic test preparation.

You'll find that our CIPP-A exam questions frequently feature detailed scenarios and practical problem-solving exercises that directly mirror industry challenges. Engaging with these CIPP-A sample sets allows you to effectively manage your time and pace yourself, giving you the ability to finish any Certified Information Privacy Professional/Asia (CIPP/A) practice test comfortably within the allotted time.

Question # 4

All of the following are exempt from Section 43A of India's IT Rules 2011 EXCEPT?

A.

Charitable groups.

B.

Sole proprietorships.

C.

Government agencies.

D.

Religious organizations.

Question # 5

In Hong Kong's revised Breach Guidance Note of 2015, what course of action did the Commissioner recommend that companies take immediately after experiencing a breach?

A.

Proceed under the assumption that the breach is a threat to personal safety.

B.

Enlist the aid of law enforcement to determine the cause of the breach.

C.

Quickly issue a notification to the data subjects affected by the breach.

D.

Immediately gather essential information in relation to the breach.

Question # 6

In the area of human rights, what separates Singapore from many other Asian countries?

A.

It is not a member of the Association of Southeast Asian Nations (ASEAN).

B.

It has not signed the International Covenant on Civil and Political Rights.

C.

It has not adopted the ASEAN Human Rights Declaration.

D.

It is not a member of the United Nations.

Question # 7

Which personal data element is NOT considered a special category of data under the General Data Protection Regulation (GDPR)?

A.

Physical or mental health data.

B.

Financial information.

C.

Race or ethnic origin.

D.

Political opinions.

Question # 8

SCENARIO – Please use the following to answer the next QUESTION:

Delilah is seeking employment in the marketing department of Good Mining Private Limited, an industry leader in drilling mines in Singapore. Delilah, while filling in the standard paper application form, is asked to provide details about emergency contacts, medical history, blood type and her insurance policy. These fields need to be filled in no matter which department Delilah applies to. The form also asks Delilah to expressly consent to the collection, use and disclosure of her personal data.

A week after submitting the form, Delilah is invited by Evan, the Director of Marketing at Good Mining, to coffee. Just before Delilah leaves, she gives her business card containing her current business contact information to Evan. Evan then uses the business card to add Delilah's details to Good Mining's business development database, which is kept on a local server. Good Mining uses the database to inform people about networking and client events that Good Mining organizes.

Why is Good Mining Private's standard form NOT compliant with Singapore's data protection law?

A.

It is not available in an electronic format.

B.

It does not contain the contact information for the HR manager.

C.

It asks for Delilah's consent to use and disclose her personal data.

D.

It asks for details that are not relevant to the job Delilah is applying for.

Question # 9

SCENARIO – Please use the following to answer the next QUESTION:

Singabank is a boutique bank in Singapore. After being notified during the hiring process, Singabank employees are subject to constant and thorough monitoring and tracking through CCTV cameras, computer monitoring software and keyboard loggers. Singabank does this to ensure its employees are complying with Singabank's data security policy. Bigbank is now considering acquiring Singabank's retail banking division. As part of its due diligence, Bigbank is seeking for Singabank to disclose to it all of its surveillance material on its employees, whether or not they are part of the retail banking division. Jimmy works in Singabank's investment banking division.

Assuming the monitoring was legal, can Singabank disclose Jimmy's personal data to Bigbank?

A.

No, because Jimmy is not in the division that Bigbank seeks to acquire.

B.

No, because the data was collected for the express purpose of complying with Singabank's privacy policies.

C.

Yes, if Singabank informs Jimmy of the disclosure of his personal data before it occurs.

D.

Yes, if Jimmy's personal data is necessary for Bigbank to determine whether to proceed with the acquisition.

Question # 10

In what case would a foreign company NOT be liable for breaches of Singapore's PDPA?

A.

If it has a physical office in Singapore.

B.

If it is storing information in Singapore.

C.

If it is collecting personal information in Singapore.

D.

If it collects information from Singaporeans living abroad.

Go to page: