CIPP-A Online Practice Questions and Answers

How can the privacy principles issued in 1980 by the Organisation for Economic Cooperation and Development (OECD) be defined?

A. Guidelines governing the protection of privacy and trans-border data flows issued in collaboration with the Federal Trade Commission.

B. Guidelines governing the protection of privacy and trans-border data flows of personal data in states that are members.

C. Mandatory rules governing the protection of privacy and trans-border data flows within the European Union.

D. Mandatory rules governing the protection of privacy and trans-border data flows among binding member states.

Which jurisdiction was the first to consider IP addresses to be personal information?

A. India.

B. Hong Kong.

C. The United States.

D. The European Union.

SCENARIO

A Singapore employer can do all of the following without obtaining an employee's consent EXCEPT?

A. Share an employee's personal data with a company that provides financial planning.

B. Disclose personal health data to a public agency during a health crisis.

C. Use computer monitoring software on an employee's computers.

D. Use closed-circuit television surveillance in the workplace.

Which control is NOT included in the requirements established by the Monetary Authority of Singapore (MAS) for financial institutions in order to deter money-laundering and financial aid to terrorism (AML/CFT)?

A. Identifying and knowing customers.

B. Sharing personal information with the PDPC.

C. Conducting regular reviews of customer accounts.

D. Monitoring and reporting suspicious financial transactions.

SCENARIO

SCENARIO

What does NOT need to be considered when determining the retention schedule for sensitive personal data?

A. Business needs.

B. Amount of data.

C. Storage capacity.

D. Regulatory requirements.

SCENARIO

In what case would a foreign company NOT be liable for breaches of Singapore's PDPA?

A. If it has a physical office in Singapore.

B. If it is storing information in Singapore.

C. If it is collecting personal information in Singapore.

D. If it collects information from Singaporeans living abroad.