CIPP/AU Practice Tests: Australian Privacy Law

This course contains the use of artificial intelligence.

Australian privacy questions often turn on one condition: whether the entity is a government agency or an organisation, whether information is sensitive, whether a recipient is a separate legal entity, or whether a rule has actually commenced. These practice tests help you recognise those conditions and choose the appropriate next step.

AI was used to draft original questions and answer explanations and to generate the cover background. The questions and explanations have been checked against the cited official materials. They are study exercises, with fictional scenarios where indicated, rather than legal advice or actual examination questions.

What is included

There are 300 single-answer questions in six tests of 50 questions, organised around the IAPP CIPP/AU Body of Knowledge and Exam Blueprint version 1.0, effective 30 June 2026:

• Foundations: federal coverage, agency governance, jurisdictional boundaries and core APP decisions.
• Collection and handling: sensitive information, notification, secondary purposes, marketing, overseas recipients and identifiers.
• Information integrity and rights: quality, security, retention, breach response, access and correction.
• Regulatory context and enforcement: exemptions, state principles, OAIC tools, penalties, the statutory privacy tort and emerging issues.
• Special cases: health and My Health Record, credit reporting and CDR, children, employment and surveillance powers.
• Mixed applications: changed conditions, statutory exceptions, interacting frameworks and practical compliance choices.

Each question includes feedback for every answer option, an overall explanation and a study prompt. Source links in the feedback support further reading and help you check the rule behind the answer. Scenarios distinguish a lawful permission from an obligation, and an exemption from one framework from authority under another.

How to use the tests

Start with an untimed attempt. For each missed question, identify the decisive condition, read the feedback for the option you chose, and review the linked official source. Then retry the relevant test after studying the rule. Use the final mixed test to practise switching between frameworks.

Each test has a custom training setting of 100 minutes and an 80% target. These are practice settings, not confirmed CIPP/AU examination timing, question count or passing-score equivalence. The tests are not advertised as full-length examination simulations.

Scope and dates

Materials were checked as at 15 October 2026. Date-sensitive questions distinguish current duties from enacted future changes, including federal ADM transparency commencing on 10 December 2026 and WA breach notification commencing on 1 January 2027. Children's Online Privacy Code development is distinguished from operative law; final Code details must be checked when registered. Study current IAPP and regulator updates alongside this course.

This is an independent preparation resource. It is not affiliated with or endorsed by IAPP and does not guarantee an examination result. CIPP/AU and associated certification marks belong to their respective owner.