CIPP-E Free Practice Test

What is an important difference between the European Court of Human Rights (ECHR) and the Court of Justice of the European Union (CJEU) in relation to their roles and functions?

1. A. ECHR can rule on issues concerning privacy as a fundamental right, while the CJEU cannot.
2. B. CJEU can force national governments to implement and honor EU law, while the ECHR cannot.
3. C. CJEU can hear appeals on human rights decisions made by national courts, while the ECHR cannot.
4. D. ECHR can enforce human rights laws against governments that fail to implement them, while the CJEU cannot.

Correct Answer: B

Which marketing-related activity is least likely to be covered by the provisions of Privacy and Electronic Communications Regulations (Directive 2002/58/EC)?

1. A. Advertisements passively displayed on a website.
2. B. The use of cookies to collect data about an individual.
3. C. A text message to individuals from a company offering concert tickets for sale.
4. D. An email from a retail outlet promoting a sale to one of their previous customer.

Correct Answer: A

According to the GDPR, how is pseudonymous personal data defined?

1. A. Data that can no longer be attributed to a specific data subject without the use of additional information kept separately.
2. B. Data that can no longer be attributed to a specific data subject, with no possibility of re-identifying the data.
3. C. Data that has been rendered anonymous in such a manner that the data subject is no longer identifiable.
4. D. Data that has been encrypted or is subject to other technical safeguards.

Correct Answer: A

Which of the following demonstrates compliance with the accountability principle found in Article 5, Section 2 of the GDPR?

1. A. Anonymizing special categories of data.
2. B. Conducting regular audits of the data protection program.
3. C. Getting consent from the data subject for a cross border data transfer.
4. D. Encrypting data in transit and at rest using strong encryption algorithms.

Correct Answer: B

Which type of personal data does the GDPR define as a “special category” of personal data?

1. A. Educational history.
2. B. Trade-union membership.
3. C. Closed Circuit Television (CCTV) footage.
4. D. Financial information.

Correct Answer: B