Exam CIPP-E Topic 1 Question 44 Discussion

Actual exam question for IAPP's CIPP-E exam
Question #: 44
Topic #: 1
In which of the following cases, cited as an example by a WP29 guidance, would conducting a single data protection impact assessment to address multiple processing operations be allowed?

Suggested Answer: D Vote an answer

According to the WP29 guidance on DPIA1, conducting a single DPIA to address multiple processing operations is allowed when the following conditions are met:
The processing operations present similar high risks, which would result in very similar mitigating measures; The DPIA is reviewed and updated regularly to take into account any changes or new risks; The DPIA is complemented by ad hoc assessments where necessary to address more specific issues.
The WP29 guidance cites the example of a railway operator who plans to evaluate the same video surveillance in all the train stations of his company as a case where a single DPIA would be sufficient, provided that the above conditions are met2. The other options do not meet these conditions, as they involve different types of processing operations, different purposes, different data subjects, or different technologies. Reference:
WP29 guidance on DPIA
WP29 guidance on DPIA, page 16

by Marvin at Jun 04, 2026, 07:12 AM

Limited Time Offer

15%

Off

Get Premium CIPP-E Questions as Interactive Self Test Engine or PDF

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
0
0
0
10