- All Exams Instant Download
Ben’s collection of additional data from customers created several potential issues for the company, which would most likely require what?
SCENARIO Please use the following to answer the next question: Joe started the Gummy Bear Company in 2000 from his home in Vermont, USA. Today, it is a multi-billion-dollar candy company operating in every continent. All of the company’s IT servers are located in Vermont. This year Joe hires his...
In which situation would a data controller most likely be able to justify the processing of the data of a child without parental consent?
In which situation would a data controller most likely be able to justify the processing of the data of a child without parental consent?A . When the data is to be processed for market research.B . When providing preventive or counselling services to the child.C . When providing the child...
An organization should perform these steps to do which of the following?
Read the following steps: ✑ Discover which employees are accessing cloud services and from which devices and apps Lock down the data in those apps and devices ✑ Monitor and analyze the apps and devices for compliance ✑ Manage application life cycles ✑ Monitor data sharing An organization should perform...
Under the GDPR, where personal data is not obtained directly from the data subject, a controller is exempt from directly providing information about processing to the data subject if?
Under the GDPR, where personal data is not obtained directly from the data subject, a controller is exempt from directly providing information about processing to the data subject if?A . The data subject already has information regarding how his data will be usedB . The provision of such information to...
A company wishes to transfer personal data to a country outside of the European Union/EEA In order to do so, they are planning an assessment of the country's laws and practices, knowing that these may impinge upon the transfer safeguards they intend to use All of the following factors would be relevant for the company to consider EXCEPT'?
A company wishes to transfer personal data to a country outside of the European Union/EEA In order to do so, they are planning an assessment of the country's laws and practices, knowing that these may impinge upon the transfer safeguards they intend to use All of the following factors would...
These organizations are commonly known as?
Under Article 80(1) of the GDPR, individuals can elect to be represented by not-for-profit organizations in a privacy group litigation or class action. These organizations are commonly known as?A . Law firm organizations.B . Civil society organizations.C . Human rights organizations.D . Constitutional rights organizations.View AnswerAnswer: B Explanation: Reference: https://gdpr-info.eu/art-80-gdpr/
Which of the following does NOT have to be included in the records most processors must maintain in relation to their data processing activities?
Which of the following does NOT have to be included in the records most processors must maintain in relation to their data processing activities?A . Name and contact details of each controller on behalf of which the processor is acting.B . Categories of processing carried out on behalf of each...
Which sentence best describes proper compliance for an international organization using Binding Corporate Rules (BCRs) as a controller or processor?
Which sentence best describes proper compliance for an international organization using Binding Corporate Rules (BCRs) as a controller or processor?A . Employees must sign an ad hoc contractual agreement each time personal data is exported.B . All employees are subject to the rules in their entirety, regardless of where the...
What is a reason the European Court of Justice declared the Data Retention Directive invalid in 2014?
What is a reason the European Court of Justice declared the Data Retention Directive invalid in 2014?A . The requirements affected individuals without exception.B . The requirements were financially burdensome to EU businesses.C . The requirements specified that data must be held within the EU.D . The requirements had limitations...
What type of data lies beyond the scope of the General Data Protection Regulation?
What type of data lies beyond the scope of the General Data Protection Regulation?A . PseudonymizedB . AnonymizedC . EncryptedD . MaskedView AnswerAnswer: B Explanation: Reference: https://www.datainspektionen.se/other-lang/in-english/the-general-data-protection-regulation-gdpr/the-purposes-and-scope-of-the-general-data-protection-regulation/
