IAPP CIPP/CN case studies
IAPP CIPP/CN · Put your knowledge to work in context.
The CIPP/CN is the China-focused credential in the IAPP's Certified Information Privacy Professional family, aimed at practitioners whose work touches Chinese data protection law: in-house and outside counsel, privacy and compliance managers, security and data governance staff, consultants, and vendors serving Chinese or multinational clients. The IAPP describes itself as a policy neutral, not-for-profit association founded in 2000 with a mission to define, promote and improve the professions of privacy, AI governance and digital responsibility globally, and it lists certifications, certification FAQs and certification training among its offerings. The IAPP CIPP/CN case studies are 5 cases and about 3,998 words.
1The Hospital App's Family Account
Riverside Children's Hospital in Hangzhou runs a patient app with 480,000 registered accounts. The app has three functions: core appointment booking and electronic medical record access; a “growth tracker” that collects a child's height, weight, gait video and vaccination history; and a “family account” that lets an adult child add an elderly parent and view the parent's prescriptions and lab results.
835 words, about 4 min2The 72-Hour Assumption
Eastbridge Commerce, a Shanghai online retailer with 6 million registered users, discovers on a Friday that a cloud storage bucket has been public for 11 days. The bucket contains 90,000 customer records with names, mobile numbers, delivery addresses and order histories.
821 words, about 4 min3Facial Recognition at the Factory Gate
Anhui Precision Parts, a 3,200-employee auto parts manufacturer owned by a German group, wants to replace badge scanners with facial recognition at three plants to stop “buddy punching.” The system stores face templates on a local server and sends attendance logs to the group's Workday instance in the EU. HR also plans to upload employees' occupational health check results, including asthma and hearing-loss findings, to Workday for global workforce analytics.
788 words, about 4 min4The 1.3 Million Player Question
Starfall Interactive, a Beijing game studio, has 2.4 million domestic players. Since January 1 it has exported gameplay logs, device IDs and purchase history for 1.3 million unique players to a Singapore analytics vendor.
817 words, about 4 min5The Scraped Profile Business
ProfileWorks, a Hangzhou marketing analytics firm, has built a database of 3.1 million Chinese consumers. It scrapes public social media posts, e-commerce reviews and forum comments, then infers health conditions, religion and income bracket.
737 words, about 4 min