- All Exams Instant Download
When does the GDPR provide more latitude for a company to process data beyond its original collection purpose?
When does the GDPR provide more latitude for a company to process data beyond its original collection purpose?A . When the data has been pseudonymized.B . When the data is protected by technological safeguards.C . When the data serves legitimate interest of third parties.D . When the data subject has...
Jane Stan's her new role as a Data Protection Officer (DPO) at a Malta-based company that allows anyone to buy and sell cryptocurrencies via its online platform. The company stores and processes the personal data of its customers in a dedicated data center located in Malta (EU)
SCENARIO Please use the following to answer the next question: Jane Stan's her new role as a Data Protection Officer (DPO) at a Malta-based company that allows anyone to buy and sell cryptocurrencies via its online platform. The company stores and processes the personal data of its customers in a...
Under the GDPR, which of the following is true in regard to adequacy decisions involving cross-border transfers?
Under the GDPR, which of the following is true in regard to adequacy decisions involving cross-border transfers? A. The European Commission can adopt an adequacy decision for individual companies. B. The European Commission can adopt, repeal or amend an existing adequacy decision. C. EU member states are vested with the...
These organizations are commonly known as?
Under Article 80(1) of the GDPR, individuals can elect to be represented by not-for-profit organizations in a privacy group litigation or class action. These organizations are commonly known as?A . Law firm organizations.B . Civil society organizations.C . Human rights organizations.D . Constitutional rights organizations.View AnswerAnswer: B Explanation: Reference: https://gdpr-info.eu/art-80-gdpr/
Which of the following describes a mandatory requirement for a group of undertakings that wants to appoint a single data protection officer?
Which of the following describes a mandatory requirement for a group of undertakings that wants to appoint a single data protection officer?A . The group of undertakings must obtain approval from a supervisory authority.B . The group of undertakings must be comprised of organizations of similar sizes and functions.C ....
According to the GDPR, how is pseudonymous personal data defined?
According to the GDPR, how is pseudonymous personal data defined?A . Data that can no longer be attributed to a specific data subject without the use of additional information kept separately.B . Data that can no longer be attributed to a specific data subject, with no possibility of re-identifying the...
A well-known video production company, based in Spain but specializing in documentaries filmed worldwide, has just finished recording several hours of footage featuring senior citizens in the streets of Madrid. Under what condition would the company NOT be required to obtain the consent of everyone whose image they use for their documentary?
A well-known video production company, based in Spain but specializing in documentaries filmed worldwide, has just finished recording several hours of footage featuring senior citizens in the streets of Madrid. Under what condition would the company NOT be required to obtain the consent of everyone whose image they use for...
Which of the following facts about Dynaroux would trigger a data protection impact assessment under the GDPR?
SCENARIO Please use the following to answer the next question: Dynaroux Fashion (‘Dynaroux’) is a successful international online clothing retailer that employs approximately 650 people at its headquarters based in Dublin, Ireland. Ronan is their recently appointed data protection officer, who oversees the company’s compliance with the General Data Protection...
When is data sharing agreement MOST likely to be needed?
When is data sharing agreement MOST likely to be needed?A . When anonymized data is being shared.B . When personal data is being shared between commercial organizations acting as joint data controllers.C . When personal data is being proactively shared by a controller to support a police investigation.D . When...
The Planet 49 CJEU Judgement applies to?
The Planet 49 CJEU Judgement applies to?A . Cookies used only by third parties.B . Cookies that are deemed technically necessary.C . Cookies regardless of whether the data accessed is personal or not.D . Cookies where the data accessed is considered as personal data only.View AnswerAnswer: C Explanation: Reference: https://www.twobirds.com/en/news/articles/2019/global/planet49-cjeu-rules-on-cookie-consent
