Certified Information Privacy Technologist (CIPT)

Last checked November 10, 2026 against the official IAPP exam page.

1. Question 1Domain II - Data collection, use, dissemination and destruction

   A weather app asks for precise device location at first launch, but its only feature is a forecast for a city the user types in. Which change best reduces privacy risk during collection?

   1. ACollect precise location in the background so that the permission prompt is avoided
   2. BKeep precise location but encrypt it at rest for every user
   3. CAsk for precise location at launch and keep it for future marketing campaigns
   4. DCollect city-level location only when the user asks for a local forecast
   Show answer and explanationHide answer

   Correct answer: D

   Collecting only what the feature needs, and only when it is needed, is the minimization step in this scenario. Encrypting precise location still collects too much, and keeping it for marketing or collecting it silently adds risk without serving the feature.

2. Question 2Domain III - Privacy risk management

   A retailer sends push notifications at midnight with product promotions. Many users find the alerts disruptive and stop using the app. Which privacy harm does this most directly illustrate?

   1. AExclusion from services or information
   2. BRe-identification through linking of datasets
   3. CIntrusion into private life
   4. DAggregation of scattered data points
   Show answer and explanationHide answer

   Correct answer: C

   Intrusion covers unwanted disturbances that interrupt a person's life, such as unsolicited night-time alerts. Re-identification, exclusion and aggregation describe other privacy problems that do not centre on unwanted disruption.

3. Question 3Domain I - The privacy technologist's role in the context of the organization

   A privacy technologist is told that the law requires personal data to be deleted once the purpose for collecting it has ended. Which action best turns this legal requirement into a technical control?

   1. APublish a policy asking staff to delete records when a project closes
   2. BMove all records into an encrypted archive that analysts can still query for future studies
   3. CAsk legal counsel to re-read the retention clause once a year
   4. DConfigure automated retention rules that purge records once their purpose ends
   Show answer and explanationHide answer

   Correct answer: D

   A technical control enforces the requirement without depending on individual behaviour, so automated retention rules that purge data at the end of its purpose are the right translation. A policy alone relies on manual compliance, an annual legal review changes no system, and a queryable archive keeps the data and still breaches the requirement.

4. Question 4Domain V - Privacy engineering and privacy governance

   Which set of objectives is associated with NIST's privacy engineering work?

   1. AEfficiency, scalability and long-term portability of the system design
   2. BAvailability, integrity and confidentiality
   3. CAccountability, transparency and fairness
   4. DPredictability, manageability and disassociability
   Show answer and explanationHide answer

   Correct answer: D

   NISTIR 8062 defines predictability, manageability and disassociability as privacy engineering objectives that complement security goals. Availability, integrity and confidentiality form the security triad, while the other sets describe ethics or general system qualities.

5. Question 5Domain IV - Privacy by design

   Which of the following is one of Ann Cavoukian's seven foundational principles of privacy by design?

   1. AMaximum data retention for future analytics
   2. BPrivacy as the default setting
   3. CPrivacy notices written after the product launches
   4. DOpt-out consent for all sensitive personal data
   Show answer and explanationHide answer

   Correct answer: B

   Privacy as the default is one of the seven principles, meaning personal data is protected without any action by the individual. The other options describe practices the principles reject, such as maximal retention, notices written after launch and opt-out consent for sensitive data.