Question bank
Certified Information Privacy Technologist
42 Certified Information Privacy Technologist questions with the correct answer and a written explanation, organised across 6 exam domains.
- 42 questions
- 6 domains
- Foundation level
certilumQuestion index
Jump straight to any question. Answers and explanations are inline.
Emerging Technologies
7 questions in this domain
- Question 1Single Choice
Which legal basis is defined as a clear, affirmative, and freely given indication of a user's agreement?
- AConsentCorrect answer
- BContractual Necessity
- CLegitimate Interests
- DLegal Obligation
Why this is the answer
Consent is defined as a clear, affirmative, and freely given indication of a user's agreement. The other legal bases depend on different justifications, not the individual's affirmative action.
- Question 2Multiple Select
Which of the following are common traps when applying legal bases to system design? (Select all that apply)
- AAssuming consent is the default or best legal basisCorrect answer
- BConfusing data minimization with legal basisCorrect answer
- CMisidentifying contractual necessity by treating useful features as necessaryCorrect answer
- DUsing automated data discovery to map personal data
Why this is the answer
The playbook identifies three major legal basis traps: treating consent as the default or best basis, confusing data minimization with legal basis, and misidentifying contractual necessity. Automated data discovery is a valid technical practice, not a trap.
- Question 3Interactive
Refer to the code block. Which consent lifecycle requirement is missing from this implementation?
- AEasy consent withdrawalCorrect answer
- BAudit logging
- CGranular preference storage
- DLegal basis identification
Why this is the answer
The code records consent and logs the event, but it does not provide a mechanism for the user to easily withdraw consent. Consent management must support both grant and withdrawal workflows.
- Question 4Single Choice
From a technical standpoint, contractual necessity requires which of the following?
- ALimit data collection to the minimum required to perform the serviceCorrect answer
- BCollect all potentially useful data for future features
- CObtain consent for every processing activity
- DRetain data indefinitely for audit purposes
Why this is the answer
Contractual necessity limits data collection to the absolute minimum required to perform the service. It does not justify collecting data simply because it might be useful in the future.
- Question 5Multiple Select
Which technical capabilities are required for effective automated data discovery and mapping? (Select all that apply)
- AMetadata taggingCorrect answer
- BAutomated discovery scanning of structured and unstructured storesCorrect answer
- CManual spreadsheet inventories of personal data
- DStandardized API endpoints for machine-readable export
Why this is the answer
Effective data discovery relies on automated scanning and metadata tagging to find personal data across disparate systems. Manual spreadsheets are not scalable, and standardized API endpoints relate more directly to data portability.
- Question 6Interactive
Refer to the code block. Which data portability requirement does this endpoint satisfy?
- AMachine-readable formatCorrect answer
- BHuman-readable PDF export
- CImmediate deletion of personal data
- DLegal review sign-off
Why this is the answer
The endpoint returns data in JSON, which is a structured, machine-readable format. Portability requires this type of format rather than human-readable documents such as PDF or HTML.
- Question 7Single Choice
What does right to erasure orchestration involve?
- APropagating deletion requests across databases, backups, caches, and third-party processorsCorrect answer
- BDeleting only primary production data
- CAutomatically rejecting all deletion requests pending legal review
- DConverting deletion requests into subject access requests
Why this is the answer
Erasure orchestration must propagate deletion across all locations where personal data resides, including primary databases, backups, caches, and third-party processors, while respecting technical feasibility.
Legal and Regulatory
7 questions in this domain
- Question 8Single Choice
Which of the following best defines consent as a legal basis under privacy regulations?
- AA clear, affirmative, and freely given indication of a user's agreement.Correct answer
- BA pre-ticked box that implies consent unless the user opts out.
- CA user's silence after receiving a privacy notice.
- DAny continued use of a service after a policy update.
Why this is the answer
Consent requires an unambiguous affirmative action; it cannot be inferred from silence, inaction, or pre-selected options.
- Question 9Multiple Select
Which two statements correctly identify common traps when implementing legal bases?
- ARelying solely on consent creates high maintenance overhead due to re-verification and withdrawal management.Correct answer
- BData minimization automatically satisfies the requirement for a legal basis.
- CIf a feature is useful to a user, it is necessarily a contractual necessity.
- DA legal basis justifies why processing occurs; minimization dictates how much data is processed.Correct answer
Why this is the answer
Consent is not always the default, minimization is not a substitute for a legal basis, and usefulness alone does not make processing contractually necessary.
- Question 10Interactive
The code block contains a metadata snippet for a data asset. Which privacy capability does it represent?
- AAutomated data discovery and mappingCorrect answer
- BData portability architecture
- CBreach notification timeline
- DIdentity verification and authentication
Why this is the answer
Metadata tagging and classification enable automated discovery and mapping, allowing the organization to locate personal data across stores.
- Question 11Single Choice
Which statement best describes contractual necessity from a technical standpoint?
- ACollection is restricted to the minimum data necessary to perform the requested service.Correct answer
- BCollection is expanded to include every feature that could benefit the user.
- CCollection is allowed for any purpose disclosed in a privacy notice.
- DCollection is unlimited as long as the contract remains active.
Why this is the answer
Contractual necessity triggers data minimization; system architecture should collect and process only what is needed to deliver the service.
- Question 12Multiple Select
Which two elements are required for an effective data portability architecture?
- AExport in a structured, commonly used, machine-readable format such as JSON or XML.Correct answer
- BStandardized API endpoints and schema mapping to transfer data between controllers.Correct answer
- CHuman-readable PDF reports that are easy to download.
- DA proprietary export format unique to the organization.
Why this is the answer
Portability requires interoperable, machine-readable formats and standardized APIs; human-readable documents and proprietary formats are insufficient.
- Question 13Interactive
The code block below shows part of a deletion workflow. What does it correctly demonstrate?
- ADeletion requests are propagated across primary databases and caches while backup deletion is coordinated with retention policies.Correct answer
- BData is immediately erased from all backups without considering technical feasibility.
- COnly soft deletion is applied to primary records and caches.
- DBackups can never be modified after an erasure request.
Why this is the answer
Good erasure orchestration covers primary and cache stores and treats backup deletion according to retention schedules rather than instant destruction.
- Question 14Single Choice
What is the primary engineering requirement when processing data under a legal obligation?
- AAutomated retention and archiving workflows that purge data according to statutory timelinesCorrect answer
- BA privacy dashboard that displays processing activities to users
- CA consent management platform that collects opt-ins
- DA recommendation engine that identifies useful data to collect
Why this is the answer
Legal obligation often requires building automated retention and archiving so data is held for the mandated period and then deleted.
Privacy Program Architecture
6 questions in this domain
- Question 15Single Choice
Which legal basis requires a balancing test between the organization's needs and the individual's rights?
- ALegitimate InterestsCorrect answer
- BConsent
- CContractual Necessity
- DLegal Obligation
Why this is the answer
Legitimate interests are defined as a balancing test between organizational needs and individual rights, supported by monitoring and transparency tools to ensure processing stays within reasonable user expectations.
- Question 16Multiple Select
Which technical controls support consent as a legal basis? (Select all that apply.)
- AGranular preference management systemsCorrect answer
- BRobust audit logs that prove when consent was givenCorrect answer
- CAutomated retention workflows for legally mandated periods
- DTechnical mechanisms for easy consent withdrawalCorrect answer
Why this is the answer
Consent requires granular preference controls, audit logs to prove consent, and easy withdrawal mechanisms. Automated retention is associated with legal obligation, not consent.
- Question 17Interactive
Review the code block. Which consent-management capability is demonstrated by the recorded fields?
- AAudit loggingCorrect answer
- BData minimization
- CContractual necessity
- DData portability
Why this is the answer
The record captures consent ID, timestamp, purposes, and withdrawal status, which supports audit logging to prove when and how consent was given. It does not directly demonstrate minimization, contractual necessity, or portability.
- Question 18Single Choice
What is the distinction between data minimization and legal basis in privacy architecture?
- ALegal basis justifies why data is processed, while data minimization dictates how much data is processed.Correct answer
- BData minimization establishes the legal basis for processing personal data.
- CLegal basis and data minimization are interchangeable terms.
- DLegal basis dictates how much data is collected, while minimization justifies the purpose.
Why this is the answer
A legal basis justifies why data is processed, while data minimization dictates how much data is processed. One does not automatically satisfy the other.
- Question 19Multiple Select
Which of the following are common traps when selecting legal bases for system design? (Select all that apply.)
- AAssuming consent is the default or best legal basis.Correct answer
- BConfusing data minimization with legal basis.Correct answer
- CMisidentifying contractual necessity by labeling useful features as necessary.Correct answer
- DApplying data minimization alongside a valid legal basis.
Why this is the answer
The traps include treating consent as default, confusing minimization with legal basis, and labeling useful features as contractual necessities. Applying minimization as a complement to a legal basis is correct practice, not a trap.
- Question 20Interactive
Review the code block. Which data-portability requirement is satisfied by this exported structure?
- AMachine-readable structured formatCorrect answer
- BHuman-readable PDF format
- CAnonymized dataset
- DEncrypted export file
Why this is the answer
Portability requires a structured, commonly used, machine-readable format such as JSON. The snippet shows JSON, not a human-readable PDF, and there is no indication of encryption or anonymization.
Privacy Program Governance
8 questions in this domain
- Question 21Single Choice
Which lawful basis requires a balancing test between the organization's needs and the rights of the individual?
- ALegitimate InterestsCorrect answer
- BConsent
- CContractual Necessity
- DLegal Obligation
Why this is the answer
Legitimate interests requires a balancing test between organizational needs and individual rights. Consent, contractual necessity, and legal obligation have other defining requirements.
- Question 22Multiple Select
Which technical capabilities are required to support consent as a lawful basis for processing? Select all that apply.
- AGranular preference management systemsCorrect answer
- BRobust audit logs to prove when consent was givenCorrect answer
- CTechnical mechanisms for easy consent withdrawalCorrect answer
- DAutomated retention schedules required by law
Why this is the answer
Consent relies on granular preferences, audit logging, and easy withdrawal. Automated retention schedules are tied to legal obligation, not consent.
- Question 23Interactive
A developer implements a right-to-erasure workflow with the function shown. Which requirement is missing from this workflow?
- APropagating the deletion to backups, caches, and third-party processorsCorrect answer
- BEnsuring the output is in JSON format
- CApplying a pseudonymization algorithm
- DConfirming the supervisor's approval
Why this is the answer
Right-to-erasure workflows must propagate deletion across primary databases, backups, caches, and third-party processors. The code only deletes from one database.
- Question 24Single Choice
What is the primary purpose of identity verification in a data subject access request?
- APreventing social engineering attacks and unauthorized access to personal dataCorrect answer
- BAccelerating data export speed
- CGuaranteeing data minimization
- DEliminating the need for audit logs
Why this is the answer
Identity verification stops unauthorized actors from using fraudulent DSARs to gain access to personal data.
- Question 25Multiple Select
Which complexities must be managed when engineering a right-to-erasure orchestration workflow? Select all that apply.
- ADeletion propagation across primary databases, backups, caches, and third-party processorsCorrect answer
- BHandling residual personal data in logs and backups according to retention policiesCorrect answer
- CManaging the tension between hard deletion and soft deletionCorrect answer
- DEnsuring deleted data is immediately available for future analytics
Why this is the answer
Erasure orchestration must propagate to primary stores, backups, caches, and third parties, handle residual data, and manage hard versus soft deletion decisions.
- Question 26Interactive
A SOAR playbook uses the following threshold logic. What major gap exists in this approach?
- AIt fails to assess whether the event creates a risk to individuals' rights and freedomsCorrect answer
- BIt does not record the user's email address
- CIt cannot classify DDoS attacks
- DIt does not generate a data portability export
Why this is the answer
Threshold logic must distinguish actual privacy breaches from minor security events by assessing risk to rights and freedoms. This code reports every security incident without that assessment.
- Question 27Single Choice
What format is required for data portability under modern privacy regulations?
- AStructured, commonly used, machine-readable format such as JSON or XMLCorrect answer
- BHuman-readable PDF report
- CA proprietary database dump
- DA printed spreadsheet
Why this is the answer
Portability requires structured, machine-readable formats like JSON or XML, not human-readable formats.
- Question 28Multiple Select
Which components are necessary for automated data discovery and mapping? Select all that apply.
- AScanning structured and unstructured data storesCorrect answer
- BMetadata taggingCorrect answer
- CAutomated discovery toolsCorrect answer
- DManual review of every document
Why this is the answer
Automated discovery uses scanning tools and metadata tagging to identify personal data across silos, instead of manual review.
Privacy Program Management
6 questions in this domain
- Question 29Single Choice
What legal basis is defined as a clear, affirmative, and freely given indication of a user's agreement?
- AConsentCorrect answer
- BContractual Necessity
- CLegal Obligation
- DLegitimate Interests
Why this is the answer
Consent is a clear, affirmative, freely given indication of agreement. Technologists support it with preference management, audit logs, and easy withdrawal mechanisms.
- Question 30Multiple Select
Which technical mechanisms are required to support consent as a legal basis? Select all that apply.
- AGranular preference management systemsCorrect answer
- BAudit logs proving consentCorrect answer
- CAutomated retention workflows
- DEasy withdrawal mechanismsCorrect answer
Why this is the answer
Consent requires granular preference controls, audit logs demonstrating when consent was given, and simple withdrawal. Automated retention workflows relate to legal obligation, not consent.
- Question 31Interactive
What legal basis is most directly reflected by the conditional processing logic in the code block?
- AConsentCorrect answer
- BContractual Necessity
- CLegal Obligation
- DVital Interests
Why this is the answer
The code gates processing on an affirmative user consent flag, which is the technical signature of consent as a legal basis.
- Question 32Single Choice
Contractual necessity requires technologists to implement which principle in system architecture?
- AData minimizationCorrect answer
- BUnlimited data storage
- CAutomated advertising
- DConsent dashboards
Why this is the answer
Contractual necessity limits collection to the minimum required to perform a service, so technologists should implement data minimization principles in architecture.
- Question 33Multiple Select
Which statements about legitimate interests are correct? Select all that apply.
- AIt balances organizational needs with individual rightsCorrect answer
- BIt requires transparency tools such as privacy dashboardsCorrect answer
- CIt is the best default basis for all processing
- DIt always overrides individual rights
Why this is the answer
Legitimate interests is a balancing test and needs transparency dashboards. It is not a default, and organizational interests do not automatically override individual rights.
- Question 34Interactive
Which legal basis is most directly supported by the automated deletion of records after their statutory retention date in the code block?
- ALegal ObligationCorrect answer
- BConsent
- CVital Interests
- DContractual Necessity
Why this is the answer
Automated purging after a statutory retention date ensures data is held only for the legally mandated duration, reflecting legal obligation.
Privacy Program Operations
8 questions in this domain
- Question 35Single Choice
Which option best describes consent as a clear lawful basis for processing personal data?
- AClear, affirmative, and freely given user agreementCorrect answer
- BAgreement implied from continued use of a service
- CPre-ticked checkbox accepted during account creation
- DProcessing required to fulfill a contract with the user
Why this is the answer
Consent must be clear, affirmative, and freely given. Implied use, pre-ticked boxes, or contract necessity do not meet this definition.
- Question 36Multiple Select
Which technical mechanisms should be implemented to support lawful consent management? Select all that apply.
- AGranular preference management systemsCorrect answer
- BAudit logs showing when consent was givenCorrect answer
- CEasy technical consent withdrawal mechanismsCorrect answer
- DAutomatic retention of data for analytics
Why this is the answer
Consent management requires granular preferences, proof of consent through audit logs, and easy withdrawal. Broad data retention for analytics is not part of this process.
- Question 37Interactive
The consent event stored as JSON in the code block lacks a way for the user to act later. Which technical capability must be added to allow easy consent withdrawal?
- APreference center for consent revocationCorrect answer
- BLegal basis assessment report
- CBackup retention schedule
- DThird-party processor agreement
Why this is the answer
Valid consent management includes a mechanism for the user to withdraw consent easily, such as a preference center, not just a stored consent record.
- Question 38Single Choice
Which statement correctly explains the difference between a legal basis and data minimization?
- ALegal basis justifies why; minimization limits how muchCorrect answer
- BData minimization provides the legal reason for processing
- CBoth terms describe the same requirement
- DLegal basis limits data volume; minimization justifies processing
Why this is the answer
The legal basis explains why processing is lawful, while data minimization determines how much data is processed. Neither concept automatically satisfies the other.
- Question 39Multiple Select
Which statements accurately describe contractual necessity as a legal basis for processing? Select all that apply.
- AProcessing required to perform the contractCorrect answer
- BCollection limited to minimum requiredCorrect answer
- CUseful features justify processing extra data
- DUser preference creates a contractual duty to process
Why this is the answer
Contractual necessity applies only to processing required to fulfill the contract. Useful or preferred features are not enough to qualify as necessary.
- Question 40Interactive
The API response in the code block is used only to display a user's subscription tier. Which modification best applies data minimization?
- AReturn only user_id and subscription_tierCorrect answer
- BKeep all fields for future use
- CRemove subscription_tier from the response
- DAdd more fields to enrich the profile
Why this is the answer
Data minimization requires returning only the data needed for the specific purpose. Here, only user identification and subscription tier are necessary.
- Question 41Single Choice
What is the main purpose of automated data discovery and mapping tools in a privacy program?
- AFind personal data across structured and unstructured storesCorrect answer
- BDraft legally compliant privacy policies
- CEliminate all data subject rights
- DAutomatically approve all access requests
Why this is the answer
Automated discovery and mapping locate personal information across data silos, which supports subject rights requests and breach response efforts.
- Question 42Multiple Select
Which characteristics are required for data portability under privacy regulations? Select all that apply.
- AStructured and commonly used formatCorrect answer
- BMachine-readable JSON or XMLCorrect answer
- CHuman-readable PDF or HTML
- DSchema mapping between systemsCorrect answer
Why this is the answer
Portability requires structured, machine-readable data with schema mapping. Human-readable formats such as PDF do not satisfy portability requirements.
Frequently asked questions
Everything about the Certified Information Privacy Technologist question bank and how to use it.