【26年版】CIPP/E CIPPE CIPP-E 国际隐私认证 Certified Information Privacy Professional/Europe 欧洲注册信息隐私专家

更新时间：试题数量：购买人数：提供作者：

有效期：个月

章节介绍：共有个章节

收藏

我的练习

我的错题
(0道)

我的收藏
(0道)

我的斩题
(0道)

我的笔记
(0道)

专项练习

顺序练习 练习进度 0 / 0

随机练习 自定义设置练习量

模拟考试 仿真模拟

题型练习 按题型分类练习

易错题 精选高频易错题

学习资料 考试学习相关信息

搜索

题库预览

An employee of company ABCD has just noticed a memory stick containing records of client data, including their names, addresses and full contact details has disappeared. The data on the stick is unencrypted and in clear text. It is uncertain what has happened to the stick at this stage, but it likely was lost during the travel of an employee. What should the company do?

Which judicial body makes decisions on actions taken by individuals wishing to enforce their rights under EU law?

In which of the following cases would an organization MOST LIKELY be required to follow both ePrivacy and data protection rules?

Under what circumstances would the GDPR apply to personal data that exists in physical form, such as information contained in notebooks or hard copy files?

Which of the following demonstrates compliance with the accountability principle found in Article 5, Section 2 of the GDPR?

Which of the following is NOT a role of works councils?

What must a data controller do in order to make personal data pseudonymous?

What obligation does a data controller or processor have after appointing a data protection officer?

Which of the following is NOT an explicit right granted to data subjects under the GDPR?

An online company's privacy practices vary due to the fact that it offers a wide variety of services. How could it best address the concern that explaining them all would make the policies incomprehensible?

Which GDPR requirement will present the most significant challenges for organizations with Bring Your Own Device (BYOD) programs?

Under Article 30 of the GDPR, controllers are required to keep records of all of the following EXCEPT?

What term BEST describes the European model for data protection?

What is an important difference between the European Court of Human Rights (ECHR) and the Court of Justice of the European Union (CJEU) in relation to their roles and functions?

If a company is planning to use closed-circuit television (CCTV) on its premises and is concerned with GDPR compliance, it should first do all of the following EXCEPT?

The European Parliament jointly exercises legislative and budgetary functions with which of the following?

When does the European Data Protection Board (EDPB) recommend reevaluating whether a transfer tool is effectively providing a level of personal data protection that is in compliance with the EuropeanUnion (EU) level?

Which sentence best describes proper compliance for an international organization using Binding Corporate Rules (BCRs) as a controller or processor?

In which scenario is a Controller most likely required to undertake a Data Protection Impact Assessment?

Bioface is a company based in the United States. It has no servers, personnel or assets in the European Union. By collecting photographs from social media and other web-based services, such as newspapers and blogs, it uses machine learning to develop a facial recognition algorithm. The algorithm identifies individuals in photographs who are not in its data set based the algorithm and its existing data. The service collects photographs of data subjects in the European Union and will identify them if presented with their photographs. Bioface offers its service to government agencies and companies in the United States and Canada, but not to those in the European Union. Bioface does not offer the service to individuals.
Why is Bioface subject to the territorial scope of the General Data Protection Regulation?