Under PIPL, which of the following statements best describes the requirement for processing data for public interest reporting?
Response:

• A. Data must be anonymized and relevant to the reporting subject
• B. Reporting entities must register with the Ministry of Industry and Information Technology (MIIT)
• C. Consent is always required
• D. Data processing is not allowed for public interest reporting

A security firm in China conducts background checks on job applicants, including criminal records verification. What must the firm do to comply with PIPL?
Response:

• A. Automatically share data with third-party hiring partners
• B. Collect criminal records data only if legally mandated and secure explicit consent
• C. Use open databases for faster background checks
• D. Store criminal records indefinitely for potential future use

What penalty may be imposed on companies that refuse to comply with PIPL's data breach reporting requirements?
Response:

• A. Increase in customer service charges
• B. Suspension of data processing activities
• C. Loss of business license
• D. Permanent data transfer ban

Which of the following best describes a personal information protection officer's responsibility under PIPL?
Response:

• A. Managing only cross-border data transfers
• B. Conducting promotional marketing for the company
• C. Monitoring only internal data processing operations
• D. Supervising personal data protection activities and ensuring compliance with legal obligations

A U.S.-based travel agency collects data from Chinese tourists booking vacations. How does the PIPL apply to this company's data processing activities?
Response:

• A. It applies only if the data is stored in China
• B. It applies because the company targets Chinese individuals and collects personal data
• C. It does not apply because the company is based outside China
• D. It applies only if the Chinese tourists file a complaint