CIPP-CN 試験問題を無料オンラインアクセス

An e-commerce company collects personal data from customers and shares it with third-party service providers for order fulfillment. What must the company do to comply with PIPL's accountability requirements?
Response:

• A.Sign a formal agreement outlining data protection responsibilities with each service provider
• B.Allow unrestricted access to personal data by service providers
• C.Share customer data only when explicitly requested by service providers
• D.Avoid signing contracts to reduce administrative work

Which of the following would make a cross-border data transfer illegal under PIPL?
Response:

• A.Conducting a legal review before the transfer
• B.Failing to meet cross-border data security requirements set by the CAC
• C.Obtaining separate user consent for the transfer
• D.Using encryption methods for secure transmission

Which of the following is required when companies implement algorithm-based personalized recommendation services?
Response:

• A.Allowing third-party access to algorithm data without restrictions
• B.Hiding algorithm operations to protect trade secrets
• C.Using algorithms exclusively for internal data analysis
• D.Informing users about how algorithms affect their experience and allowing them to opt out

Which of the following regulatory bodies oversees the security of critical information infrastructure (CII) in China?
Response:

• A.Cyberspace Administration of China (CAC)
• B.National Financial Regulatory Administration (NFRA)
• C.State Administration for Market Regulation (SAMR)
• D.Ministry of Public Security (MPS)

Under Chinese data protection laws, when can companies use algorithmic decision-making systems without user consent?
Response:

• A.When performing public safety tasks authorized by law
• B.When conducting internal employee performance reviews
• C.When processing sensitive personal information
• D.When providing personalized marketing services