IAPP Certified Information Privacy Professional/China - CIPP-CN Exam Practice Test

A. Obtain explicit user consent, ensure data security, and allow users to opt out

B. Share location data with insurance providers without informing users

C. Encrypt the data only after a legal investigation is conducted

D. Collect all driving data without notification to improve service quality

A. Use undisclosed algorithms for competitive advantage

B. Avoid disclosing any details about recommendation algorithms

C. Require users to accept all personalized recommendations by default

D. Provide transparency about how algorithms affect users' content experience

A. Verifying records through government databases for law enforcement purposes

B. Anonymizing sensitive information before processing

C. Conducting background checks with the subject's consent

D. Storing criminal records indefinitely without legal justification

A. Long-term storage in cloud-based systems without encryption

B. Temporary storage until project completion without further restrictions

C. Local data storage within China unless government-approved for transfer abroad

D. Automatic transfer to international research institutions

A. People's Bank of China (PBOC)

B. National Financial Regulatory Administration (NFRA)

C. Cyberspace Administration of China (CAC)

D. Ministry of Public Security (MPS)

A. Allowing unrestricted access to foreign vehicle manufacturers

B. Sharing vehicle-generated data with international researchers

C. Storing sensitive vehicle data locally in China

D. Storing data in cloud servers located outside China

A. Creating anonymous employee records

B. Following national labor laws and relevant agreements

C. Registering the company's database with authorities

D. Obtaining employee consent

A. Demand immediate employment from the company

B. Sue the company for discrimination without further evidence

C. Request a manual review and an explanation of the automated decision

D. File a complaint only if the rejection was due to a system malfunction

A. Cybersecurity Law (CSL)

B. Personal Information Protection Law (PIPL)

C. Human Genetic Resources Administration Regulation (HGRAR)

D. Data Security Law (DSL)

A. Refer the issue to international data regulators

B. Permanently block user complaints

C. Allow the data subject to seek a manual review and explain the decision-making process

D. Delete the user's data without explanation

A. For advertising and promotional purposes

B. For cross-border marketing activities

C. During emergency situations threatening life or health

D. When transferring data to foreign partners

A. When explicit approval from the CAC is obtained

B. When public information is used

C. When the data transfer benefits public policy development

D. When the data is used for internal research purposes

A. Conducting background checks with explicit consent

B. Informing employees about changes in workplace data policies

C. Using employee work performance data for evaluations

D. Sharing personal contact information with third-party vendors without consent

A. Archive the data but restrict its visibility to the customer

B. Transfer the data to another service provider for safekeeping

C. Delete the data unless it is required for pending legal or financial obligations

D. Deny the request if the customer's last purchase occurred within the past year

A. Allow users to opt out of personalized recommendations and explain how algorithms work

B. Use undisclosed algorithms to maximize marketing revenue

C. Avoid disclosing recommendation system details to ensure competitiveness

D. Collect data without notifying users to improve personalized results