CIPT

A product manager asks whether a new telemetry field is legally permissible to collect. Who should make the primary legal interpretation before engineering implements anything?

• AThe privacy counsel or compliance owner
• BThe database administrator
• CThe scrum master
• DThe network engineer

Several new U.S. state privacy-law requirements took effect on January 1, 2026, and your company must honor more consumer choice signals across products. What is the privacy technologist's MOST useful first contribution?

• ARewrite the public privacy notice without reviewing the systems
• BMap where preferences are collected, stored, propagated, and enforced across applications…
• CTell engineering to block all analytics until legal finishes its memo
• DMove all preference data into a single spreadsheet for manual processing

What makes privacy threat modeling different from a security-only threat model?

• AIt ignores attackers and focuses only on system uptime
• BIt focuses only on encryption strength
• CIt considers harms from data use, inference, and loss of autonomy in addition to confiden…
• DIt applies only after a production incident

A company wants to use an AI resume-screening tool that relies heavily on school names, postal codes, and employment gaps. What is the BEST early privacy and ethics question to raise?

• AWhether the tool can process more resumes per hour than recruiters
• BWhether the vendor will offer a discount for a multiyear contract
• CWhether proxy variables could produce unfair or discriminatory outcomes that are hard to…
• DWhether the model runs faster in the cloud than on premises

A vendor contract says customer data may be processed only on documented instructions. Before a product team enables an optional analytics module, what should the privacy technologist verify first?

• AThat the module uses the vendor's newest user interface
• BThat the intended purpose, configuration, and instructions are authorized and match the a…
• CThat the vendor has a larger market share than competitors
• DThat the analytics results can be exported to a spreadsheet

A wellness-app team says it already ran STRIDE, so no further privacy review is needed. What is the STRONGEST response?

• ASTRIDE is enough because privacy is a subset of security
• BPrivacy review can wait until the first customer complaint arrives
• CSTRIDE may miss privacy-specific harms such as linkability, identifiability, and unwanted…
• DThreat modeling is relevant only for regulated industries

A smart-city kiosk infers age range and mood from passersby to decide which promotions to display. What is the GREATEST privacy concern?

• AThe display may consume too much battery power
• BInferred traits can enable discriminatory or manipulative treatment without the individua…
• CThe kiosk might need a larger screen
• DThe promotions may reduce advertising revenue

Legal has approved a 30-day retention period for debug logs. What is the privacy technologist's next BEST step?

• ATranslate the rule into deletion jobs, storage settings, and verification tests
• BAssume developers will remember to delete logs manually
• CWait until the annual audit to see whether logs are still present
• DIncrease the retention period so troubleshooting is easier

During design of a subject access workflow, which decision should stay primarily with legal or privacy policy owners rather than engineering?

• AChoosing whether an exemption allows certain records to be withheld
• BSetting the API timeout for the download service
• CSelecting the cloud region for a cache server
• DChoosing the compression format for the export file

In a privacy risk assessment, what does impact describe MOST directly?

• AThe number of developers assigned to the feature
• BThe severity of likely adverse effects if the event occurs
• CThe age of the system being reviewed
• DThe amount of budget spent on compliance tools

A health app can lawfully collect menstrual-cycle data with consent for a symptom feature. What is the BEST reason a privacy technologist might still recommend rejecting the feature as designed?

• AAny feature using health data is always illegal
• BThe feature creates sensitivity and trust risks that outweigh its marginal value in the p…
• CEngineers should never build features that users request
• DThe app store bans all health-related analytics

A weather app wants to request precise location only when a user taps "Use my current location." What is the BEST notice approach?

• APresent a just-in-time explanation tied to that action and request only the needed permis…
• BHide the explanation in a long privacy policy linked from the footer
• CRequest continuous background location during account creation
• DAssume the app-store listing provides enough notice

A connected-car service offers email alerts, in-app offers, and targeted advertising settings. Which design BEST supports reliable preference management?

• AStore each preference locally in the user interface that captured it
• BUse one purpose-based preference service with timestamps, source, and downstream enforcem…
• CLet marketing vendors maintain their own separate preference records
• DAsk users to resubmit choices every time they sign in

A mobile SDK starts collecting device identifiers and crash metadata as soon as the app launches. What should the privacy technologist do FIRST?

• ATreat the SDK as harmless because it came from a major vendor
• BDocument exactly what is collected and disable unnecessary collection until purpose, noti…
• CMove the SDK to a different screen so users do not notice it
• DDelete the privacy notice because it might create concern

A sales team wants to scrape public professional profiles to train a lead-scoring model. What is the MOST important privacy question to ask before building the pipeline?

• AWhether the scraper can run on a cheaper server
• BWhether the planned collection and reuse fit the original context and whether all fields…
• CWhether the model can be trained without any documentation
• DWhether the team can avoid telling internal stakeholders about the project

Customer-support chat transcripts should be kept only 90 days unless placed on legal hold. Which control is MOST effective?

• ARely on agents to delete transcripts manually every quarter
• BConfigure automatic deletion tied to retention rules, with legal-hold exceptions document…
• CArchive everything indefinitely in case it becomes useful later
• DKeep transcripts only on employee laptops

A user requests deletion, but their records still exist in immutable disaster-recovery backups. What is the BEST technical response?

• ARestore the backup and delete the records manually every week
• BDelete the production records, prevent ordinary access to the backup copy, and let the ba…
• CIgnore the request because backups are exempt from all privacy obligations
• DCopy the backup to more locations so it is easier to manage

A newsletter sign-up form asks for date of birth, gender, employer, and phone number even though only an email address is needed to send the newsletter. What is the BEST fix?

• AAdd more optional fields so the company can learn even more
• BKeep all fields because some users may not mind sharing them
• CRemove the fields that are not necessary for the stated purpose
• DHide the extra fields after submission rather than deleting them

An analytics team wants to combine employee badge logs with disability-accommodation records in the enterprise data lake. Which control is MOST important first?

• APlace both datasets in the same broadly accessible workspace to simplify analysis
• BSegregate the sensitive dataset with purpose-based access controls and review whether the…
• CConvert all dates to a different format
• DRename the tables so their contents are less obvious

Which statement about pseudonymized data is MOST accurate?

• AIt is always anonymous and no longer linked to a person in any meaningful way
• BIt remains personal data if it can be re-associated using additional information
• CIt eliminates all privacy obligations because names have been removed
• DIt can never be useful for analytics

A public agency wants to release neighborhood mobility statistics, but some rural cells contain very few people. Which approach BEST reduces reidentification risk while preserving useful trends?

• APublish the raw counts because they are already aggregated
• BApply differential privacy or suppression so small groups cannot be singled out from spar…
• CReplace only the column names and keep the underlying values unchanged
• DShare the dataset only with journalists instead of the public

A retailer collected purchase history to fulfill orders and now wants to use it to offer installment financing. What should be assessed FIRST?

• AWhether the new use is compatible with the original context and what new notice, choice,…
• BWhether the financing offer can be designed in the brand colors
• CWhether the data warehouse can support a larger table
• DWhether customer-service agents like the idea

A smart-TV vendor aggregates viewing history across household devices to sell audience segments to advertisers. What is the BIGGEST privacy risk?

• AThe TVs may need more storage space
• BCross-device aggregation can create unexpected household profiles that are more revealing…
• CAggregation always makes data anonymous
• DAdvertisers prefer text files over dashboards

A company is designing a portal to deliver subject access files that may contain sensitive account details. Which design is BEST?

• APut the file on a public URL and rely on obscurity
• BSend the file as an unencrypted email attachment for convenience
• CProvide an authenticated download with expiration, audit logging, and scoped access to th…
• DPost the file in a shared team workspace so support can help if needed

Support agents currently export customer data to CSV and email the files to requesters. What is the BEST improvement?

• AAllow any agent to export anything as long as they add a disclaimer
• BUse a role-based export workflow with approval, MFA, and temporary delivery links instead…
• CCompress the CSV file into a ZIP archive and leave the rest of the process unchanged
• DAsk agents to rename the file so it looks less sensitive

A fitness app repeatedly interrupts users with full-screen prompts until they enable contact syncing. What privacy harm is MOST clearly implicated?

• ADecisional interference that undermines autonomous choice
• BLoss of network redundancy
• CInsufficient memory allocation
• DCross-site scripting

A cookie banner shows a large green "Accept all" button, while "Reject nonessential" is hidden in small gray text behind another click. Why is this problematic?

• AIt uses too many colors
• BIt is a dark pattern that steers users toward one privacy choice through asymmetrical des…
• CIt does not collect enough data for marketers
• DIt makes the page load too quickly

A user can change the number in a profile URL and load another customer's application record. Why is this a serious privacy problem?

• AIt is mainly a branding problem because the URL looks messy
• BIt is an insecure direct object reference that can expose personal data to unauthorized u…
• CIt only matters if the record contains financial data
• DIt is acceptable if the site logs the access attempt

Your AI vendor updates its terms to permit training on customer prompts unless the feature is turned off. What should happen BEFORE the product team enables the updated service?

• ANothing, because contract changes are legal's problem only
• BA privacy change review should confirm the purpose, instructions, contract terms, and tec…
• CThe change should go live quietly so users are not alarmed
• DThe service should be moved to a different server name

A checkout page contains advertising pixels that capture typed shipping details before the customer submits the order. What is the BEST privacy response?

• AAllow the capture because the customer intended to buy something anyway
• BBlock sensitive form-field collection until necessity, notice, and controls have been rev…
• CKeep the pixels but change their vendor names
• DMove the pixel code lower in the page source

An employer wants to issue smart badges that map who meets with whom throughout the day. What is the BEST first privacy-engineering question?

• AHow to maximize the retention period for all badge telemetry
• BWhat specific purpose requires the data, and can the goal be met with less granular signa…
• CWhether the badges can be made in more colors
• DHow to make sure employees cannot turn the badges off

An apartment building wants to replace key cards with face recognition even though current entry controls work well. What is the STRONGEST privacy objection?

• AFace recognition is always less accurate than any other system
• BBiometric identifiers are hard to revoke and may be disproportionate when a less intrusiv…
• CResidents will always prefer carrying plastic cards
• DCameras cannot be used indoors

A company rolls out an AI meeting assistant that records and transcribes calls. Which default is MOST privacy protective?

• AEnable recording for every meeting and let participants complain later
• BRequire visible notice and controls, and exclude especially sensitive channels or meeting…
• CSave transcripts forever because storage is cheap
• DTurn on emotion scoring for all employees so managers get more context

Which metric is the BEST example of a privacy key risk indicator rather than a simple activity count?

• ANumber of privacy team meetings held this quarter
• BNumber of slide decks created for training
• CPercentage of high-risk vendors operating with overdue privacy reviews
• DNumber of employees in the company directory

A teen social app makes account deletion available only after eight screens of warnings, guilt-laden messages, and confusing button labels. What is the BEST critique?

• AThe flow is acceptable because retention helps business metrics
• BThe deletion path creates manipulative friction that interferes with users' privacy choic…
• CDeletion should always require a phone call instead
• DThe real issue is only that the screens use too much text