CIPP/US U.S. Government & Privacy Exam
2026 –Questions & Verified Answers
Questions with Correct Answers and
Detailed Rationales
1. What is a Negligent Tort?
A. Failure to exercise the standard of care that a reasonably prudent person
would have exercised in a similar situation.
B. A tort committed by someone acting with a general or specific intent.
C. NONE OF THE ABOVE
D. Civil action against a government officer for deprivation of any right, privilege
or immunity required by the US Constitution or law.
Answer: A
Rationale: A negligent tort is based on carelessness or failure to act with
reasonable care, not on intent. The other options describe intentional torts (B), a
constitutional claim (D), or are incorrect.
2. What is an example of an intentional tort? (Select all that apply)
A. Negligence
B. Assault
C. Breach of contract
D. Defamation
Answer: B and D
Rationale: Assault (threat of harmful contact) and defamation (false statement
harming reputation) are intentional torts. Negligence is unintentional; breach of
contract is not a tort.
3. What is the primary purpose of the CAN-SPAM Act?
A. To enforce consent decrees in advertising.
,B. To regulate commercial email messages.
C. To protect consumer rights in online transactions.
D. To establish privacy standards for government agencies.
Answer: B
Rationale: The CAN-SPAM Act sets rules for commercial email, including opt-out
requirements and penalties for violations.
4. Describe how a negligent tort differs from an intentional tort.
A. A negligent tort arises from a failure to act with reasonable care, while an
intentional tort involves deliberate actions that cause harm.
B. A negligent tort is always a criminal offense, whereas an intentional tort is not.
C. A negligent tort is related to contract law, while an intentional tort is related to
property law.
D. A negligent tort requires proof of intent, while an intentional tort does not.
Answer: A
Rationale: Negligence is about unreasonable carelessness; intentional torts
require a deliberate act with knowledge of consequences.
5. What is one common defense used against traditional privacy tort claims?
A. Consent
B. Fraud
C. Negligence
D. Defamation
Answer: A
Rationale: If a person consents to the collection or disclosure of their private
information, that is a complete defense to many privacy torts.
6. Describe the differences between intentional torts, negligence, and strict
liability.
A. Intentional torts are always criminal, negligence is a type of contract breach,
and strict liability applies only to property damage.
,B. Intentional torts are civil wrongs, negligence is a criminal act, and strict liability
applies only in consumer protection cases.
C. Intentional torts require proof of intent, negligence requires proof of harm, and
strict liability requires proof of negligence.
D. Intentional torts involve deliberate actions causing harm, negligence arises
from failure to exercise reasonable care, and strict liability holds a party
responsible regardless of fault.
Answer: D
Rationale: This accurately distinguishes the three liability theories. Strict liability
applies even without fault (e.g., defective products).
7. What is a Privacy Notice?
A. A statement to data subjects explaining how an organization collects personal
information and uses, retains, and discloses it.
B. A notice to a data protection officer during a breach investigation.
C. It is not a privacy regulation.
D. A notice to impacted individuals of a data breach.
Answer: A
Rationale: A privacy notice (or privacy policy) informs individuals about data
practices, as required by laws like the GDPR and CCPA.
8. If a company is found to be in violation of privacy laws, how might a consent
decree be utilized to address the issue?
A. To enforce compliance with privacy regulations without pursuing a lengthy
court case.
B. To create new privacy laws for the industry.
C. To allow the company to operate without restrictions.
D. To impose criminal charges against the company.
Answer: A
Rationale: A consent decree is a negotiated settlement that requires the company
to take specific actions (e.g., audits, training) without admitting guilt.
, 9. Describe how the structure of state and federal governments is similar in terms
of their branches.
A. Both state and federal governments have three branches: Legislative,
Executive, and Judicial, each with distinct roles and responsibilities.
B. State governments have two branches while federal governments have three
branches.
C. Federal governments have a single branch that encompasses all functions,
unlike state governments.
D. State governments do not have an Executive branch, unlike federal
governments.
Answer: A
Rationale: All states have a constitution that creates three branches, mirroring the
federal separation of powers.
10. Which of the following are said to be an example of negligent tort?
A. patient injury as a result of a fall unattended
B. (incomplete)
Answer: A (assuming it's the complete option)
Rationale: A fall due to lack of supervision could constitute negligence if the
caregiver failed to exercise reasonable care.
11. Which amendment to the U.S. Constitution protects against unreasonable
searches and seizures?
A. First Amendment
B. Fourth Amendment
C. Fifth Amendment
D. Fourteenth Amendment
Answer: B
Rationale: The Fourth Amendment requires a warrant based on probable cause for
government searches; it is a cornerstone of privacy law.
2026 –Questions & Verified Answers
Questions with Correct Answers and
Detailed Rationales
1. What is a Negligent Tort?
A. Failure to exercise the standard of care that a reasonably prudent person
would have exercised in a similar situation.
B. A tort committed by someone acting with a general or specific intent.
C. NONE OF THE ABOVE
D. Civil action against a government officer for deprivation of any right, privilege
or immunity required by the US Constitution or law.
Answer: A
Rationale: A negligent tort is based on carelessness or failure to act with
reasonable care, not on intent. The other options describe intentional torts (B), a
constitutional claim (D), or are incorrect.
2. What is an example of an intentional tort? (Select all that apply)
A. Negligence
B. Assault
C. Breach of contract
D. Defamation
Answer: B and D
Rationale: Assault (threat of harmful contact) and defamation (false statement
harming reputation) are intentional torts. Negligence is unintentional; breach of
contract is not a tort.
3. What is the primary purpose of the CAN-SPAM Act?
A. To enforce consent decrees in advertising.
,B. To regulate commercial email messages.
C. To protect consumer rights in online transactions.
D. To establish privacy standards for government agencies.
Answer: B
Rationale: The CAN-SPAM Act sets rules for commercial email, including opt-out
requirements and penalties for violations.
4. Describe how a negligent tort differs from an intentional tort.
A. A negligent tort arises from a failure to act with reasonable care, while an
intentional tort involves deliberate actions that cause harm.
B. A negligent tort is always a criminal offense, whereas an intentional tort is not.
C. A negligent tort is related to contract law, while an intentional tort is related to
property law.
D. A negligent tort requires proof of intent, while an intentional tort does not.
Answer: A
Rationale: Negligence is about unreasonable carelessness; intentional torts
require a deliberate act with knowledge of consequences.
5. What is one common defense used against traditional privacy tort claims?
A. Consent
B. Fraud
C. Negligence
D. Defamation
Answer: A
Rationale: If a person consents to the collection or disclosure of their private
information, that is a complete defense to many privacy torts.
6. Describe the differences between intentional torts, negligence, and strict
liability.
A. Intentional torts are always criminal, negligence is a type of contract breach,
and strict liability applies only to property damage.
,B. Intentional torts are civil wrongs, negligence is a criminal act, and strict liability
applies only in consumer protection cases.
C. Intentional torts require proof of intent, negligence requires proof of harm, and
strict liability requires proof of negligence.
D. Intentional torts involve deliberate actions causing harm, negligence arises
from failure to exercise reasonable care, and strict liability holds a party
responsible regardless of fault.
Answer: D
Rationale: This accurately distinguishes the three liability theories. Strict liability
applies even without fault (e.g., defective products).
7. What is a Privacy Notice?
A. A statement to data subjects explaining how an organization collects personal
information and uses, retains, and discloses it.
B. A notice to a data protection officer during a breach investigation.
C. It is not a privacy regulation.
D. A notice to impacted individuals of a data breach.
Answer: A
Rationale: A privacy notice (or privacy policy) informs individuals about data
practices, as required by laws like the GDPR and CCPA.
8. If a company is found to be in violation of privacy laws, how might a consent
decree be utilized to address the issue?
A. To enforce compliance with privacy regulations without pursuing a lengthy
court case.
B. To create new privacy laws for the industry.
C. To allow the company to operate without restrictions.
D. To impose criminal charges against the company.
Answer: A
Rationale: A consent decree is a negotiated settlement that requires the company
to take specific actions (e.g., audits, training) without admitting guilt.
, 9. Describe how the structure of state and federal governments is similar in terms
of their branches.
A. Both state and federal governments have three branches: Legislative,
Executive, and Judicial, each with distinct roles and responsibilities.
B. State governments have two branches while federal governments have three
branches.
C. Federal governments have a single branch that encompasses all functions,
unlike state governments.
D. State governments do not have an Executive branch, unlike federal
governments.
Answer: A
Rationale: All states have a constitution that creates three branches, mirroring the
federal separation of powers.
10. Which of the following are said to be an example of negligent tort?
A. patient injury as a result of a fall unattended
B. (incomplete)
Answer: A (assuming it's the complete option)
Rationale: A fall due to lack of supervision could constitute negligence if the
caregiver failed to exercise reasonable care.
11. Which amendment to the U.S. Constitution protects against unreasonable
searches and seizures?
A. First Amendment
B. Fourth Amendment
C. Fifth Amendment
D. Fourteenth Amendment
Answer: B
Rationale: The Fourth Amendment requires a warrant based on probable cause for
government searches; it is a cornerstone of privacy law.
