Free CIPP/US Practice Questions
Original questions with explanations
These original CIPP/US practice questions are educational examples designed to exercise reasoning. They are not recalled exam items and do not imply access to live or confidential test content.
Question 1
An organization collects more personal data than needed for a stated purpose. Which principle is implicated?
- A. Public availability
- B. Data minimization
- C. Unlimited retention
- D. Purpose expansion
Answer and explanation
B. Data minimization Data minimization limits collection to information relevant and necessary for the purpose.
Question 2
A vendor handles personal information. What should the organization establish?
- A. No written terms
- B. Unlimited reuse
- C. Responsibility transfer without monitoring
- D. Due diligence, contract requirements, security expectations, use limits, and oversight
Answer and explanation
D. Due diligence, contract requirements, security expectations, use limits, and oversight Accountability extends to service providers handling personal information.
Question 3
Why is a data inventory important?
- A. It guarantees compliance
- B. It eliminates legal analysis
- C. It identifies what data exists, where it flows, why it is used, and who receives it
- D. It replaces all security controls
Answer and explanation
C. It identifies what data exists, where it flows, why it is used, and who receives it Governance requires visibility into data processing and flows.
Question 4
A breach is discovered. What should happen first?
- A. Delete logs
- B. Wait for publicity
- C. Activate the incident process, contain risk, preserve facts, and assess applicable obligations
- D. Notify everyone before investigation
Answer and explanation
C. Activate the incident process, contain risk, preserve facts, and assess applicable obligations Coordinated containment and fact development support defensible notification decisions.
Question 5
What should control CIPP/US preparation?
- A. Recalled live items
- B. The current IAPP body of knowledge and exam blueprint
- C. A single state law
- D. A foreign-law outline
Answer and explanation
B. The current IAPP body of knowledge and exam blueprint The official documents define the tested U.S. privacy scope.
How to Review Your Results
For every missed item, name the tested concept, explain why the correct option is best, and identify the clue that rules out each distractor. Then review the corresponding official content domain.