Certified Information Privacy Professional/Europe

Here you have the best IAPP CIPP/E practice exam questions

You have 283 total questions to study from
Each page has 5 questions, making a total of 57 pages
You can navigate through the pages using the buttons at the bottom
This questions were last updated on May 11, 2025
This site is not affiliated with or endorsed by IAPP.

Question 1 of 283

Which statement is correct when considering the right to privacy under Article 8 of the European Convention on Human Rights (ECHR)?

The right to privacy is an absolute right

The right to privacy has to be balanced against other rights under the ECHR

The right to freedom of expression under Article 10 of the ECHR will always override the right to privacy

The right to privacy protects the right to hold opinions and to receive and impart ideas without interference

Correct Answer: B

The right to privacy under Article 8 of the European Convention on Human Rights (ECHR) is not an absolute right. It must be balanced against other rights and interests, such as national security, public safety, and the protection of the rights and freedoms of others. Article 8 allows for certain restrictions that are necessary in a democratic society and in accordance with the law. Therefore, the right to privacy must be weighed against competing rights under the ECHR.

Question 2 of 283

What is one major goal that the OECD Guidelines, Convention 108 and the Data Protection Directive (Directive 95/46/EC) all had in common but largely failed to achieve in Europe?

The establishment of a list of legitimate data processing criteria

The creation of legally binding data protection principles

The synchronization of approaches to data protection

The restriction of cross-border data flow

Correct Answer: C

The OECD Guidelines, Convention 108, and the Data Protection Directive (Directive 95/46/EC) aimed to harmonize data protection laws across different jurisdictions to ensure a consistent level of protection and facilitate the free flow of data across borders. However, despite these efforts, significant differences in the implementation and enforcement of data protection laws persisted among European countries, leading to a lack of synchronization. This fragmentation was one of the key reasons for the introduction of the General Data Protection Regulation (GDPR), which aimed to provide a more uniform and comprehensive data protection framework across the European Union.

Question 3 of 283

A key component of the OECD Guidelines is the “Individual Participation Principle”. What parts of the General Data Protection Regulation (GDPR) provide the closest equivalent to that principle?

The lawful processing criteria stipulated by Articles 6 to 9

The information requirements set out in Articles 13 and 14

The breach notification requirements specified in Articles 33 and 34

The rights granted to data subjects under Articles 12 to 22

Correct Answer: D

The Individual Participation Principle emphasizes the right of individuals to be informed about whether their data is being processed, to access their data, to correct inaccuracies, and to challenge compliance. The GDPR mirrors this principle through the rights granted to data subjects under Articles 12 to 22. These articles cover the right to access, rectify, erase, restrict processing, data portability, and object to data processing, enabling individuals to actively control their personal data.

Question 4 of 283

Which EU institution is vested with the competence to propose new data protection legislation on its own initiative?

The European Council

The European Parliament

The European Commission

The Council of the European Union

Correct Answer: C

The European Commission is vested with the competence to propose new data protection legislation on its own initiative. It has the exclusive right to bring forward legislative proposals, including those concerning data protection, within the European Union. An example of this is the General Data Protection Regulation (GDPR), which was proposed by the European Commission.

Question 5 of 283

What is an important difference between the European Court of Human Rights (ECHR) and the Court of Justice of the European Union (CJEU) in relation to their roles and functions?

ECHR can rule on issues concerning privacy as a fundamental right, while the CJEU cannot.

CJEU can force national governments to implement and honor EU law, while the ECHR cannot.

CJEU can hear appeals on human rights decisions made by national courts, while the ECHR cannot.

ECHR can enforce human rights laws against governments that fail to implement them, while the CJEU cannot.

Correct Answer: B

The CJEU can force national governments to implement and honor EU law, while the ECHR cannot. The CJEU ensures that EU law is interpreted and applied consistently across all member states and has the authority to compel compliance. In contrast, the ECHR deals with violations of the European Convention on Human Rights and can issue judgments on such violations, but it does not have the same enforcement power as the CJEU regarding compliance by national governments.