Practice CIPP-A Exam Online

Question 1

What does NOT need to be considered when determining the retention schedule for sensitive personal data?

A : Business needs

B : Amount of data.

C : Storage capacity

D : Regulatory requirements

Answer: C

Question 2

What term is defined by the European Commission to mean any data that relates to an identified or identifiable individual?

A : Personally identifiable information.

B : Sensitive information.

C : Personal data

D : Identified data.

Answer: C

Question 3

Which of the following topics was NOT addressed in India's Information Technology Act 2000 (IT Act)?

A : Digital signatures.

B : Censorship limitations

C : Electronic transactions.

D : Cybersecurity procedures.

Answer: D

Question 4

In which of the following cases would a Singaporean be prevented from accessing information about herself from an organization?

A : The information was collected in the previous 12 months.

B : The information is related to an individual-s credit rating

C : The cost of providing the information proved to be unreasonable

D : Any personal information about others has been deleted from the document.

Answer: B

Question 5

In Hong Kong's revised Breach Guidance Note of 2015, what course of action did the Commissioner recommend that companies take immediately after experiencing a breach?

A : Proceed under the assumption that the breach is a threat to personal safety

B : Enlist the aid of law enforcement to determine the cause of the breach.

C : Quickly issue a notification to the data subjects affected by the breach.

D : Immediately gather essential information in relation to the breach.

Answer: B

Name:	Certified Information Privacy Professional/Asia
Exam Code:	CIPP-A
Certification:	IAPP Certification Programs
Vendor:	IAPP
Total Questions:	92
Last Updated:	Aug 02, 2026

IAPP CIPP-A Answers