IAPP CIPM

Certified Information Privacy Manager

Enrolling now you will get access to 159 questions in a unique set of
CIPM dumps

Question 1
What is the
best
way to understand the location, use and importance of personal data within an organization?

Options:

A. By analyzing the data inventory.

B. By testing the security of data systems.

C. By evaluating methods for collecting data.

D. By interviewing employees tasked with data entry.

Answer: C

Question 2
What are you doing if you succumb to "overgeneralization" when analyzing data from metrics?

Options:

A. Using data that is too broad to capture specific meanings.

B. Possessing too many types of data to perform a valid analysis.

C. Using limited data in an attempt to support broad conclusions.

D. Trying to use several measurements to gauge one aspect of a program.

Answer: A

Question 3
In addition to regulatory requirements and business practices, what important factors must a global privacy
strategy consider?

https://www.certification-questions.com
IAPP CIPM

Options:

A. Monetary exchange.

B. Geographic features.

C. Political history.

D. Cultural norms.

Answer: B

Question 4
What have experts identified as an important trend in privacy program development?

Options:

A. The narrowing of regulatory definitions of personal information.

B. The rollback of ambitious programs due to budgetary restraints.

C. The movement beyond crisis management to proactive prevention.

D. The stabilization of programs as the pace of new legal mandates slows.

Answer: C

Question 5

SCENARIO
Please use the following to answer the next question:

Manasa is a product manager at Omnipresent Omnimedia, where she is responsible for leading the
development of the company's flagship product, the Handy Helper. The Handy Helper is an application that
can be used in the home to manage family calendars, do online shopping, and schedule doctor
appointments. After having had a successful launch in the United States, the Handy Helper is about to be
made available for purchase worldwide.

The packaging and user guide for the Handy Helper indicate that it is a "privacy friendly"
product suitable for the whole family, including children, but does not provide any further detail or privacy
notice. In order to use the application, a family creates a single account, and the primary user has access
to all information about the other users. Upon start up, the primary user must check a box consenting to
receive marketing emails from Omnipresent Omnimedia and selected marketing partners in order to be
able to use the application.

Sanjay, the head of privacy at Omnipresent Omnimedia, was working on an agreement with a European
distributor of Handy Helper when he fielded many questions about the product from the distributor. Sanjay

https://www.certification-questions.com
IAPP CIPM

needed to look more closely at the product in order to be able to answer the questions as he was not
involved in the product development process.

In speaking with the product team, he learned that the Handy Helper collected and stored all of a user's
sensitive medical information for the medical appointment scheduler. In fact, all of the user's information is
stored by Handy Helper for the additional purpose of creating additional products and to analyze usage of
the product. This data is all stored in the cloud and is encrypted both during transmission and at rest.

Consistent with the CEO's philosophy that great new product ideas can come from anyone, all Omnipresent
Omnimedia employees have access to user data under a program called Eureka. Omnipresent Omnimedia
is hoping that at some point in the future, the data will reveal insights that could be used to create a fully
automated application that runs on artificial intelligence, but as of yet, Eureka is not well-defined and is
considered a long-term goal.

What step in the system development process did Manasa skip?

Options:

A. Obtain express written consent from users of the Handy Helper regarding marketing.

B. Work with Sanjay to review any necessary privacy requirements to be built into the product.

C. Certify that the Handy Helper meets the requirements of the EU-US Privacy Shield Framework.

D. Build the artificial intelligence feature so that users would not have to input sensitive information
into the Handy Helper.

Answer: C

Question 6

SCENARIO
Please use the following to answer the next question:

Manasa is a product manager at Omnipresent Omnimedia, where she is responsible for leading the
development of the company's flagship product, the Handy Helper. The Handy Helper is an application that
can be used in the home to manage family calendars, do online shopping, and schedule doctor
appointments. After having had a successful launch in the United States, the Handy Helper is about to be
made available for purchase worldwide.

The packaging and user guide for the Handy Helper indicate that it is a "privacy friendly"
product suitable for the whole family, including children, but does not provide any further detail or privacy
notice. In order to use the application, a family creates a single account, and the primary user has access
to all information about the other users. Upon start up, the primary user must check a box consenting to
receive marketing emails from Omnipresent Omnimedia and selected marketing partners in order to be

https://www.certification-questions.com
IAPP CIPM

able to use the application.

Sanjay, the head of privacy at Omnipresent Omnimedia, was working on an agreement with a European
distributor of Handy Helper when he fielded many questions about the product from the distributor. Sanjay
needed to look more closely at the product in order to be able to answer the questions as he was not
involved in the product development process.

In speaking with the product team, he learned that the Handy Helper collected and stored all of a user's
sensitive medical information for the medical appointment scheduler. In fact, all of the user's information is
stored by Handy Helper for the additional purpose of creating additional products and to analyze usage of
the product. This data is all stored in the cloud and is encrypted both during transmission and at rest.

Consistent with the CEO's philosophy that great new product ideas can come from anyone, all Omnipresent
Omnimedia employees have access to user data under a program called Eureka. Omnipresent Omnimedia
is hoping that at some point in the future, the data will reveal insights that could be used to create a fully
automated application that runs on artificial intelligence, but as of yet, Eureka is not well-defined and is
considered a long-term goal.

What administrative safeguards should be implemented to protect the collected data while in use by
Manasa and her product management team?

Options:

A. Document the data flows for the collected data.

B. Conduct a Privacy Impact Assessment (PIA) to evaluate the risks involved.

C. Implement a policy restricting data access on a "need to know" basis.

D. Limit data transfers to the US by keeping data collected in Europe within a local data center.

Answer: A

Question 7

SCENARIO
Please use the following to answer the next question:

Manasa is a product manager at Omnipresent Omnimedia, where she is responsible for leading the
development of the company's flagship product, the Handy Helper. The Handy Helper is an application that
can be used in the home to manage family calendars, do online shopping, and schedule doctor
appointments. After having had a successful launch in the United States, the Handy Helper is about to be
made available for purchase worldwide.

https://www.certification-questions.com
IAPP CIPM

The packaging and user guide for the Handy Helper indicate that it is a "privacy friendly"
product suitable for the whole family, including children, but does not provide any further detail or privacy
notice. In order to use the application, a family creates a single account, and the primary user has access
to all information about the other users. Upon start up, the primary user must check a box consenting to
receive marketing emails from Omnipresent Omnimedia and selected marketing partners in order to be
able to use the application.

Sanjay, the head of privacy at Omnipresent Omnimedia, was working on an agreement with a European
distributor of Handy Helper when he fielded many questions about the product from the distributor. Sanjay
needed to look more closely at the product in order to be able to answer the questions as he was not
involved in the product development process.

In speaking with the product team, he learned that the Handy Helper collected and stored all of a user's
sensitive medical information for the medical appointment scheduler. In fact, all of the user's information is
stored by Handy Helper for the additional purpose of creating additional products and to analyze usage of
the product. This data is all stored in the cloud and is encrypted both during transmission and at rest.

Consistent with the CEO's philosophy that great new product ideas can come from anyone, all Omnipresent
Omnimedia employees have access to user data under a program called Eureka. Omnipresent Omnimedia
is hoping that at some point in the future, the data will reveal insights that could be used to create a fully
automated application that runs on artificial intelligence, but as of yet, Eureka is not well-defined and is
considered a long-term goal.

What element of the Privacy by Design (PbD) framework might the Handy Helper violate?

Options:

A. Failure to obtain opt-in consent to marketing.

B. Failure to observe data localization requirements.

C. Failure to implement the least privilege access standard.

D. Failure to integrate privacy throughout the system development life cycle.

Answer: B

Question 8

SCENARIO
Please use the following to answer the next question:

Manasa is a product manager at Omnipresent Omnimedia, where she is responsible for leading the
development of the company's flagship product, the Handy Helper. The Handy Helper is an application that

https://www.certification-questions.com
IAPP CIPM

can be used in the home to manage family calendars, do online shopping, and schedule doctor
appointments. After having had a successful launch in the United States, the Handy Helper is about to be
made available for purchase worldwide.

The packaging and user guide for the Handy Helper indicate that it is a "privacy friendly"
product suitable for the whole family, including children, but does not provide any further detail or privacy
notice. In order to use the application, a family creates a single account, and the primary user has access
to all information about the other users. Upon start up, the primary user must check a box consenting to
receive marketing emails from Omnipresent Omnimedia and selected marketing partners in order to be
able to use the application.

Sanjay, the head of privacy at Omnipresent Omnimedia, was working on an agreement with a European
distributor of Handy Helper when he fielded many questions about the product from the distributor. Sanjay
needed to look more closely at the product in order to be able to answer the questions as he was not
involved in the product development process.

In speaking with the product team, he learned that the Handy Helper collected and stored all of a user's
sensitive medical information for the medical appointment scheduler. In fact, all of the user's information is
stored by Handy Helper for the additional purpose of creating additional products and to analyze usage of
the product. This data is all stored in the cloud and is encrypted both during transmission and at rest.

Consistent with the CEO's philosophy that great new product ideas can come from anyone, all Omnipresent
Omnimedia employees have access to user data under a program called Eureka. Omnipresent Omnimedia
is hoping that at some point in the future, the data will reveal insights that could be used to create a fully
automated application that runs on artificial intelligence, but as of yet, Eureka is not well-defined and is
considered a long-term goal.

What can Sanjay do to minimize the risks of offering the product in Europe?

Options:

A. Sanjay should advise the distributor that Omnipresent Omnimedia has certified to the Privacy
Shield Framework and there should be no issues.

B. Sanjay should work with Manasa to review and remediate the Handy Helper as a gating item
before it is released.

C. Sanjay should document the data life cycle of the data collected by the Handy Helper.

D. Sanjay should write a privacy policy to include with the Handy Helper user guide.

Answer: C

Question 9

https://www.certification-questions.com
IAPP CIPM

Which statement is
FALSE
regarding the use of technical security controls?

Options:

A. Technical security controls are part of a data governance strategy.

B. Technical security controls deployed for one jurisdiction often satisfy another jurisdiction.

C. Most privacy legislation lists the types of technical security controls that must be implemented.

D. A person with security knowledge should be involved with the deployment of technical security
controls.

Answer: B

Question 10

An organization's privacy officer was just notified by the benefits manager that she accidentally sent out the
retirement enrollment report of all employees to a wrong vendor.

Which of the following actions should the privacy officer take

Options:

A. Perform a risk of harm analysis.

B. Report the incident to law enforcement.

C. Contact the recipient to delete the email.

D. Send firm-wide email notification to employees.

Answer: A

Would you like to see more? Don't miss our CIPM PDF
file at:
https://www.certification-questions.com/iapp-pdf/cipm-pdf.html

https://www.certification-questions.com