IAPP CIPT Exam - Topic 5 Question 111 Discussion

Actual exam question for IAPP's CIPT exam

Question #: 111
Topic #: 5

Which of the following is most important to provide to the data subject before the collection phase of the data lifecycle?

APrivacy Notice.

BDisclosure Policy.

CConsent Request.

DData Protection Policy.

Show Suggested Answer

Suggested Answer: A

Option A: A privacy notice informs data subjects about how their data will be collected, used, and protected. It is crucial to provide this notice before data collection to ensure transparency and comply with legal requirements.

Option B: A disclosure policy might detail how data will be shared, but it is generally part of a broader privacy notice.

Option C: While obtaining consent is important, the privacy notice is the first step in informing the data subject about the data processing activities, enabling informed consent.

Option D: A data protection policy outlines an organization's overall approach to protecting data but is typically internal rather than something provided directly to data subjects.

IAPP CIPT Study Guide

GDPR Article 13 on Information to be provided where personal data are collected from the data subject

by Royce at Nov 24, 2025, 04:43 PM

Limited Time Offer

25%

Off

Get Premium CIPT Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Susana

24 days ago

I feel A) Privacy Notice is the best choice. Transparency builds trust.

upvoted 0 times

...

Jess

29 days ago

B) Disclosure Policy is key too. It explains how data will be used.

upvoted 0 times

...

Alonzo

1 month ago

A) Privacy Notice covers a lot. It sets expectations for the data subject.

upvoted 0 times

...

Alona

1 month ago

I agree, but C) Consent Request is also important. Without consent, data collection feels wrong.

upvoted 0 times

...

Hoa

1 month ago

I think A) Privacy Notice is crucial. It informs the subject about their data rights.

upvoted 0 times

...

Leatha

2 months ago

I don't know, B) Disclosure Policy seems pretty key too.

upvoted 0 times

...

Vanesa

2 months ago

Wait, are we sure A) is the most important?

upvoted 0 times

...

Eveline

2 months ago

A) Privacy Notice is a must-have before collecting data.

upvoted 0 times

...

Lonny

3 months ago

I think C) Consent Request is more important.

upvoted 0 times

...

Antonio

3 months ago

I just hope they don't try to sneak in a "your firstborn child" clause in the consent form. That would be a real plot twist!

upvoted 0 times

...

Alline

3 months ago

B) Disclosure Policy is good too. Transparency is crucial when it comes to data privacy.

upvoted 0 times

...

Keneth

3 months ago

D) Data Protection Policy is also super important. Gotta make sure the data is secure, you know?

upvoted 0 times

...

Lashunda

3 months ago

The correct answer is C) Consent Request. That's the most important thing to provide before collecting any data.

upvoted 0 times

...

Chery

3 months ago

I lean towards the Privacy Notice being the right answer, but I wonder if the Data Protection Policy could also play a role in this context.

upvoted 0 times

...

Leoma

4 months ago

I remember practicing a question similar to this, and I think the Disclosure Policy was mentioned as important too, but I can't recall the details.

upvoted 0 times

...

Chana

4 months ago

Data protection policy might be the best choice here. That's the overarching framework that covers all the other elements like notices and consent. Gotta have that solid foundation in place.

upvoted 0 times

...

Nickolas

4 months ago

I'm leaning towards the privacy notice. That's where you lay out all the details about how the data will be used and protected. Seems like the most comprehensive option.

upvoted 0 times

...

Charlie

4 months ago

Consent request for sure. You can't just collect people's data without getting their explicit permission first. That's the foundation of data protection.

upvoted 0 times

...

Lamar

4 months ago

Definitely A) Privacy Notice. It's crucial!

upvoted 0 times

...

Shantay

5 months ago

I'm not entirely sure, but I feel like the Consent Request might be more important since it directly involves the subject's agreement.

upvoted 0 times

...

Avery

5 months ago

I think the Privacy Notice is crucial because it informs the data subject about how their data will be used.

upvoted 0 times

...

Elouise

5 months ago

D) Data Protection Policy is important, but it’s more about internal processes.

upvoted 0 times

...

Anisha

5 months ago

I agree, consent is key. Can't just take people's data without asking first!

upvoted 0 times

...

Daniela

5 months ago

Hmm, this is a tricky one. I'm not totally sure about the differences between all these policies and notices. I'll have to think carefully about which one is most important for the data subject.

upvoted 0 times

...

Donte

6 months ago

I think the key here is to focus on the data subject's rights and what they need to be informed of before any data is collected. The privacy notice seems like the most important thing to provide upfront.

upvoted 0 times