About this exam
CIPP-E is the IAPP exam Certified Information Privacy Professional/Europe.
Paid practice material for this exam is not available yet, but you can try its free sample questions.
- Exam code
- CIPP-E
- Vendor
- IAPP
- Practice questions
- Not available yet
- Free sample questions
- 5
- Question bank last updated
- Not available yet
Try 2 sample questions
Taken from the free sample set for CIPP-E.
Question 1
What is one major goal that the OECD Guidelines, Convention 108 and the Data Protection Directive
(Directive 95/46/EC) all had in common but largely failed to achieve in Europe?
- AOption A:
The establishment of a list of legitimate data processing criteria
- BOption B:
The creation of legally binding data protection principles
- COption C:
The synchronization of approachesto data protection
- DOption D:
The restriction of cross-border data flow
Show answer and explanation
Correct answer: C
The OECD Guidelines, Convention 108 and the Data Protection Directive (Directive 95/46/EC) all
aimed to harmonize the national data protection laws of the member states of the European
Economic Community (EEC) and to establish a common framework for the protection of personal
data. However, they largely failed to achieve this goal due to several reasons, such as:
The lack of political will and commitment from the member states to implement the directives fully
and consistently12.
The divergent interpretations and applications of the directives by different national authorities,
courts and regulators12.
The emergence of new technologies and challenges that required new or updated legal solutions,
such as electronic communications, cookies, biometrics, cloud computing, etc12.
The influence of other regional or international initiatives that addressed some aspects of data
protection differently or in conflict with the directives, such as the US Privacy Shield Framework3.
Reference: 1: Free CIPP/E Study Guide - International Association of Privacy Professionals 2: CIPP/E
Certification - International Association of Privacy Professionals 3: Schrems II: A Critical Analysis -
European Data Protection Board
Question 2
A key component of the OECD Guidelines is the “Individual Participation Principle”. What parts of the
General Data Protection Regulation (GDPR) provide the closest equivalent to that principle?
- AOption A:
The lawful processing criteria stipulated by Articles 6 to 9
- BOption B:
The information requirements set out in Articles 13 and 14
- COption C:
The breach notification requirements specified in Articles 33 and 34
- DOption D:
The rights granted to data subjects under Articles 12 to 22
Show answer and explanation
Correct answer: D
: The Individual Participation Principle is one of the Fair Information Practice Principles (FIPPs) that
are not part of any legal framework, but are widely adopted by many data privacy regulations in
force today1. The FIPPs are a set of guidelines for fair information practices that aim to protect the
privacy and security of personal information. The Individual Participation Principle holds that
individuals have a number of rights, including the right to have their personal data corrected or
erased, the right to access and obtain confirmation of their personal data, the right to be informed
about how their personal data is used and who it is shared with, and the right to object or withdraw
consent for certain purposes2.
The General Data Protection Regulation (GDPR) is a legal framework that implements the European
Union’s (EU) Data Protection Directive and provides comprehensive protection for all individuals
within the EU regarding their personal data. The GDPR grants individuals a number of rights, such as
the right to access, rectify, erase, restrict, port, object, or not be subject to automated decision making based on their personal data. These rights are similar to those under the FIPPs and can be
found in Articles 12 to 22 of the GDPR.
See all 5 free sample questions