최신IAPP Certified Information Privacy Professional/China - CIPP-CN무료샘플문제

A. Inform users and obtain explicit consent before collecting facial data

B. Share collected facial data with global research partners

C. Use facial recognition for all public services by default

D. Collect facial data automatically without user notification

A. Storing data for longer than six months

B. Outsourcing personal data processing with a formal agreement

C. Encrypting personal data without user permission

D. Selling sensitive personal information without user consent

A. Allowing third-party access without formal agreements

B. Conducting regular personal information protection audits

C. Sharing user data with partners without disclosing processing terms

D. Storing outdated user data indefinitely

A. Informing users about the purpose of AI-generated decisions

B. Sharing personal data used in AI model training without user consent

C. Using anonymized data sets for AI model training

D. Encrypting sensitive personal information before data processing

A. Register the transfer with the Ministry of Public Security (MPS)

B. Deny the request unless authorized by Chinese law

C. Share the data without consent if used for academic research

D. Transfer data after encrypting it for security

A. Processing employee payroll information as required by labor law

B. Storing employee medical records without consent

C. Selling employee contact details to recruitment agencies

D. Tracking employee movements outside of work hours

A. No obligations, as the company is registered outside China

B. Conducting a security assessment and ensuring compliance with PIPL data processing standards

C. Storing data locally in Japan without user consent

D. Automatically sharing data with Chinese authorities

A. Resolve the breach internally and notify no one

B. Suspend all data processing operations immediately

C. Inform affected individuals and report the breach to relevant authorities promptly

D. Wait for a formal government notice before reporting the breach

A. Disclose only basic processing terms in its privacy policy

B. Encrypt data and share it only with partners

C. Obtain customer consent and conduct a cross-border security assessment

D. Avoid storing any Chinese user data outside the country

A. CNY 5 million

B. 5% of the company's global revenue from the previous fiscal year

C. CNY 10 million

D. 2% of the company's net profit

A. Using encryption methods for secure transmission

B. Failing to meet cross-border data security requirements set by the CAC

C. Obtaining separate user consent for the transfer

D. Conducting a legal review before the transfer

A. User consent for the transfer

B. Publication of all data transfer details online

C. Certification by a personal information protection authority

D. A security assessment by authorities

A. A formal investigation, suspension of data processing, and a significant financial penalty

B. Additional data processing permissions granted upon investigation

C. No consequences if the company addresses the breach internally

D. A public apology and a small fine

A. People's Bank of China (PBOC) and National Financial Regulatory Administration (NFRA)

B. Cyberspace Administration of China (CAC) and Ministry of Public Security (MPS)

C. Ministry of Public Security (MPS) and National Health Commission (NHC)

D. Ministry of Industry and Information Technology (MIIT) and State Administration for Market Regulation (SAMR)