- All Exams Instant Download
Which of the following would NOT be relevant when determining if a processing activity would be considered profiling?
Which of the following would NOT be relevant when determining if a processing activity would be considered profiling?A . If the processing is to be performed by a third-party vendorB . If the processing involves data that is considered personal dataC . If the processing of the data is done...
What is an important difference between the European Court of Human Rights (ECHR) and the Court of Justice of the European Union (CJEU) in relation to their roles and functions?
What is an important difference between the European Court of Human Rights (ECHR) and the Court of Justice of the European Union (CJEU) in relation to their roles and functions?A . ECHR can rule on issues concerning privacy as a fundamental right, while the CJEU cannot.B . CJEU can force...
Which GDPR requirement will present the most significant challenges for organizations with Bring Your Own Device (BYOD) programs?
Which GDPR requirement will present the most significant challenges for organizations with Bring Your Own Device (BYOD) programs?A . Data subjects must be sufficiently informed of the purposes for which their personal data is processed.B . Processing of special categories of personal data on a large scale requires appointing a...
Under Article 58 of the GDPR, which of the following describes a power of supervisory authorities in European Union (EU) member states?
Under Article 58 of the GDPR, which of the following describes a power of supervisory authorities in European Union (EU) member states?A . The ability to enact new laws by executive order.B . The right to access data for investigative purposes.C . The discretion to carry out goals of elected...
Pursuant to Article 17 and EDPB Guidelines S'2019 on RTBF criteria in search engines cases, all of the following would be valid grounds for data subject delisting requests EXCEPT?
Pursuant to Article 17 and EDPB Guidelines S'2019 on RTBF criteria in search engines cases, all of the following would be valid grounds for data subject delisting requests EXCEPT?A . The personal dale has been collected in relation to the offer of Information society services (ISS) to a child.B ....
Since blockchain transactions are classified as pseudonymous, are they considered to be within the material scope of the GDPR or outside of it?
Since blockchain transactions are classified as pseudonymous, are they considered to be within the material scope of the GDPR or outside of it?A . Outside the material scope of the GDPR, because transactions do not include personal data about data subjects m the European Union.B . Within the material scope...
For which of the following operations would an employer most likely be justified in requesting the data subject’s consent?
For which of the following operations would an employer most likely be justified in requesting the data subject’s consent?A . Posting an employee’s bicycle race photo on the company’s social media.B . Processing an employee’s health certificate in order to provide sick leave.C . Operating a CCTV system on company...
Under which of the following conditions does the General Data Protection Regulation NOT apply to the processing of personal data?
Under which of the following conditions does the General Data Protection Regulation NOT apply to the processing of personal data? A. When the personal data is processed only in non-electronic form B. When the personal data is collected and then pseudonymised by the controller C. When the personal data is...
For what reason would JaphSoft be considered a controller under the GDPR?
SCENARIO Please use the following to answer the next question: Liem, an online retailer known for its environmentally friendly shoes, has recently expanded its presence in Europe. Anxious to achieve market dominance, Liem teamed up with another eco friendly company, EcoMick, which sells accessories like belts and bags. Together the...
As a result of Sam’s actions, the Gummy Bear Company potentially violated Articles 33 and 34 of the GDPR and will be required to do what?
SCENARIO Please use the following to answer the next question: Joe started the Gummy Bear Company in 2000 from his home in Vermont, USA. Today, it is a multi-billion-dollar candy company operating in every continent. All of the company’s IT servers are located in Vermont. This year Joe hires his...
