IAPP Certified Information Privacy Professional/China - CIPP-CN Free Exam Questions

A. Exporting genetic data without government approval

B. Sharing anonymized genetic data for authorized research

C. Collecting genetic samples for national health programs

D. Conducting medical research with informed consent

A. Processing personal data without documenting roles

B. Avoiding legal agreements to speed up data processing

C. Allowing unrestricted access to data for all parties involved

D. Establishing clear data processing roles and responsibilities through a formal agreement

A. A Chinese resident using a foreign social networking platform

B. A multinational company processing personal information of Chinese customers while operating within China

C. A foreign business marketing its products exclusively to European customers

D. A foreign company profiling Chinese customers for targeted advertising

A. Public social media profiles

B. Business email addresses

C. User login details

D. Financial records and biometrics

A. Avoid storing any Chinese user data outside the country

B. Encrypt data and share it only with partners

C. Disclose only basic processing terms in its privacy policy

D. Obtain customer consent and conduct a cross-border security assessment

A. A foreign e-commerce website selling products to Chinese consumers

B. A Chinese citizen using an international social media platform

C. A Chinese expatriate residing abroad

D. A foreign company without Chinese customers

A. Unlimited data collection for better accuracy

B. Permanent retention of processed data

C. Transparency, fairness, and impartiality in decision-making processes

D. Sharing decision-making algorithms with competitors

A. Allow the data subject to seek a manual review and explain the decision-making process

B. Refer the issue to international data regulators

C. Permanently block user complaints

D. Delete the user's data without explanation

A. Register the transfer with the Ministry of Public Security (MPS)

B. Share the data without consent if used for academic research

C. Transfer data after encrypting it for security

D. Deny the request unless authorized by Chinese law

A. Storing data in cloud servers located outside China

B. Storing sensitive vehicle data locally in China

C. Sharing vehicle-generated data with international researchers

D. Allowing unrestricted access to foreign vehicle manufacturers

A. Sue the company for discrimination without further evidence

B. Request a manual review and an explanation of the automated decision

C. Demand immediate employment from the company

D. File a complaint only if the rejection was due to a system malfunction

A. Issuing industry-specific data standards

B. Developing personal information protection certifications

C. Supervising cross-border data transfers

D. Enforcing cybersecurity regulations

A. Allowing parents to review and delete their child's personal data

B. Providing educational apps with transparent privacy policies

C. Offering parental control features on children's devices

D. Collecting sensitive personal data from children without parental consent

A. Ministry of Industry and Information Technology (MIIT)

B. People's Bank of China (PBOC)

C. State Administration for Market Regulation (SAMR)

D. Cyberspace Administration of China (CAC)