IAPP CIPP-CN Prüfungsthemen:
| Abschnitt | Ziele |
|---|---|
| Verarbeitung personenbezogener Daten und Betroffenenrechte | - Pflichten und Grenzen der Datenverarbeitung - Rechte betroffener Personen und Anforderungen an die Einwilligung |
| Unternehmensinterne Einhaltung von Vorschriften und Governance | - Datenschutz-Folgenabschätzungen - Verwaltung von Datenschutzprogrammen |
| Rechtlicher Rahmen für Datenschutz und Datensicherheit in China | - Gesetz zum Schutz personenbezogener Daten (PIPL) - Datensicherheitsgesetz (DSL) - Cybersicherheitsgesetz (CSL) |
| Grenzüberschreitende Datenübermittlungen | - Standardvertragsklauseln und Zertifizierungen - Sicherheitsbewertungen und aufsichtsrechtliche Anforderungen |
| Grundlagen des Datenschutzes und der Datenverarbeitung | - Entwicklung der Datenschutzgesetze und Regelwerke - Wesentliche Konzepte und Grundsätze des Datenschutzes |
IAPP Certified Information Privacy Professional/China CIPP-CN Prüfungsfragen mit Lösungen
1. When can an employer legally process sensitive personal information such as health records in China?
Response:
A) If requested by team supervisors for job performance reviews
B) When the employee has not formally objected
C) Only with explicit consent from the employee or when required by law
D) When it benefits the company's productivity analysis
2. Which of the following would be considered a breach of Chinese health data processing laws?
Response:
A) Sharing patients' health data with a foreign lab without authorization
B) Collecting voluntary health information from patients with consent
C) Providing healthcare services with clear privacy policies
D) Storing anonymized health records for medical research
3. A fintech company collects and processes large volumes of customer data in China. Which supervisory authorities would primarily monitor the company's data processing practices for compliance?
Response:
A) Ministry of Industry and Information Technology (MIIT) and State Administration for Market Regulation (SAMR)
B) People's Bank of China (PBOC) and National Financial Regulatory Administration (NFRA)
C) Cyberspace Administration of China (CAC) and Ministry of Public Security (MPS)
D) Ministry of Public Security (MPS) and National Health Commission (NHC)
4. Which regulatory body oversees the protection of personal financial data in China?
Response:
A) Cyberspace Administration of China (CAC)
B) People's Bank of China (PBOC)
C) National Health Commission (NHC)
D) Ministry of Public Security (MPS)
5. An e-commerce company collects personal data from customers and shares it with third-party service providers for order fulfillment. What must the company do to comply with PIPL's accountability requirements?
Response:
A) Allow unrestricted access to personal data by service providers
B) Sign a formal agreement outlining data protection responsibilities with each service provider
C) Avoid signing contracts to reduce administrative work
D) Share customer data only when explicitly requested by service providers
Fragen und Antworten:
| 1. Frage Antwort: C | 2. Frage Antwort: A | 3. Frage Antwort: B | 4. Frage Antwort: B | 5. Frage Antwort: B |
1308 Kundenbewertungen
