IAPPCIPM90 cards4 domains

CIPM Flashcards

Active recall study cards for the IAPP Certified Information Privacy Manager exam. Flip each card to reveal the answer, filter by domain, or shuffle for spaced repetition.

0 / 90 cards reviewed0% done

Card 1 of 90

privacy-program-governance

Under GDPR Article 37, what are the three triggers that make appointing a Data Protection Officer mandatory?

Click to reveal answer

Answer

A DPO is mandatory when: (1) a public authority or body processes personal data, (2) core activities require regular and systematic monitoring of data subjects at large scale, or (3) core activities involve large-scale processing of special category data or criminal conviction data. 'Core activities' is the key qualifier — ancillary HR or payroll processing does not trigger the obligation.

Click to flip back

Tip: Use Space to flip, ← / → to navigate

Ready for the real thing?

Take a timed CIPMmock exam to test what you've learned.