IAPP CIPP-E Practice Exams
Last updated on Oct 22,2026- Exam Code: CIPP-E
- Exam Name: Certified Information Privacy Professional/Europe (CIPP/E)
- Certification Provider: IAPP
- Latest update: Oct 22,2026
Question #101
How does the GDPR now define “processing”?
- A . Any act involving the collecting and recording of personal data.
- B . Any operation or set of operations performed on personal data or on sets of personal data.
- C . Any use or disclosure of personal data compatible with the purpose for which the data was collected.
- D . Any operation or set of operations performed by automated means on personal data or on sets of personal data.
Question #102
For which of the following operations would an employer most likely be justified in requesting the data subject’s consent?
- A . Posting an employee’s bicycle race photo on the company’s social media.
- B . Processing an employee’s health certificate in order to provide sick leave.
- C . Operating a CCTV system on company premises.
- D . Assessing a potential employee’s job application.
Question #103
WP29’s “Guidelines on Personal data breach notification under Regulation 2016/679’’ provides examples of ways to communicate data breaches transparently.
Which of the following was listed as a method that would NOT be effective for communicating a breach to data subjects?
- A . A postal notification
- B . A direct electronic message
- C . A notice on a corporate blog
- D . A prominent advertisement in print media