IAPP Exam CIPP-A Topic 1 Question 52 Discussion

Actual exam question for IAPP's CIPP-A exam

Question #: 52
Topic #: 1

[All CIPP-A Questions]

In which situation would a data intermediary based in Singapore be liable for breaches against the PDPA?

AWhen it fails to provide an individual access to his or her data.

BWhen it does not provide anonymous transactions with an individual.

CWhen it fails to inform an individual it is processing data from a controller.

DWhen it processes data contrary to the provisions established in the contract.

Show Suggested Answer

Suggested Answer: B

by Kanisha at Dec 23, 2023, 02:38 PM

Limited Time Offer

25%

Off

Get Premium CIPP-A Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Matthew

1 days ago

Definitely D. The intermediary can't just do whatever it wants with the data - it has to stick to the agreed-upon contract.

upvoted 0 times

...

Mireya

12 days ago

Hmm, I'm torn between B and D. But I'll go with D since the intermediary needs to follow the contract terms.

upvoted 0 times

...

Monroe

13 days ago

Option C seems like the right choice. The intermediary should inform the individual that it is processing their data on behalf of a controller.

upvoted 0 times

...

Skye

16 days ago

I think option D is the correct answer. The data intermediary is responsible for processing data in accordance with the provisions in the contract with the controller.

upvoted 0 times

...

Deandrea

18 days ago

I believe option A is also important. Providing access to one's own data is a fundamental right under the PDPA.

upvoted 0 times

...

Shoshana

19 days ago

I agree with Aretha. It's important for the data intermediary to be transparent about their data processing activities.

upvoted 0 times

...

Aretha

21 days ago

I think the data intermediary would be liable if they fail to inform an individual they are processing data from a controller.

upvoted 0 times

...

Denise

23 days ago

I'm not sure, but I think it could also be D) When it processes data contrary to the provisions established in the contract. That seems like a serious breach too.

upvoted 0 times

...

Leontine

25 days ago

I agree with Sherill. If the data intermediary in Singapore doesn't provide access to data, they should be liable for breaches against the PDPA.

upvoted 0 times

...

Sherill

1 months ago

I think the answer is A) When it fails to provide an individual access to his or her data.

upvoted 0 times

...