Discuss IAPP CIPP/E Exam Topic 1 Question 16

Which sentence best describes proper compliance for an international organization using Binding Corporate Rules (BCRs) as a controller or processor?

AEmployees must sign an ad hoc contractual agreement each time personal data is exported.

BAll employees are subject to the rules in their entirety, regardless of where the work is taking place.

CAll employees must follow the privacy regulations of the jurisdictions where the current scope of their work is established.

DEmployees who control personal data must complete a rigorous certification procedure, as they are exempt from legal enforcement.

Suggested Answer: C

Get Premium CIPP/E Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

14 comments · newest first

Brittani 1 year ago

Not sure about D, that sounds too lenient.

Clay 1 year ago

Definitely B, that's how it works globally.

Vincent 1 year ago

Wait, are you serious? I thought it was A!

Alana 1 year ago

I disagree, it should be C. Jurisdiction matters!

Brianne 1 year ago

BCRs apply to all employees, no matter where they are.

Minna 1 year ago

D seems off to me; I don't recall anything about employees being exempt from legal enforcement just because they have certification.

Leslie 1 year ago

I'm a bit confused about A; I thought BCRs were supposed to simplify compliance, not require new contracts every time data is exported.

Arlie 1 year ago

I remember practicing a question similar to this, and I think C might be the answer since it emphasizes following local privacy laws.

Curt 1 year ago

I think B sounds right because BCRs apply to all employees, but I'm not 100% sure if it covers every situation.

Shelba 1 year ago

Hmm, I'm a bit confused on this one. The question mentions back-to-back firewalls, so I'm not sure if the ransomware would even be able to affect the OT systems. Maybe the engineers would just need to go to the historian to restore things? I'll have to think this through a bit more.

Frankie 1 year ago

I'm a bit confused by the options here. I'll need to think through each one carefully to determine which tasks are most relevant for the deployment plan.

Alfreda 1 year ago

I can see how students attending more lectures would have higher grades, so I think C makes the most sense here, right?

Lashandra 1 year ago

This is a tricky question, but I think I can work through it. Let me think about the key concepts around commercial banks and credit creation.

Maurine 1 year ago

I think it's tricky because the fundamentals of inspection can definitely limit containment. But wasn't the question asking which ones are *not* a residual risk?

IAPP CIPP/E Exam - Topic 1 Question 16 Discussion