Based on GDPR Article 35, which of the following situations would trigger the need to complete a DPIA?
Based on GDPR Article 35, which of the following situations would trigger the need to complete a DPIA?A . A company wants to combine location data with other data in order to offer more personalized service for the customer.B . A company wants to use location data to infer information...
After detecting an intrusion involving the theft of unencrypted personal data, who shall the breached company notify first under GDPR requirements?
After detecting an intrusion involving the theft of unencrypted personal data, who shall the breached company notify first under GDPR requirements?A . Any parents of children whose personal data was compromised.B . Any affected customers whose data was compromised.C . A competent supervisory authority.D . A local law enforcement agencyView...
For which of the following operations would an employer most likely be justified in requesting the data subject’s consent?
For which of the following operations would an employer most likely be justified in requesting the data subject’s consent?A . Posting an employee’s bicycle race photo on the company’s social media.B . Processing an employee’s health certificate in order to provide sick leave.C . Operating a CCTV system on company...
Which of the following is NOT an explicit right granted to data subjects under the GDPR?
Which of the following is NOT an explicit right granted to data subjects under the GDPR? A. The right to request access to the personal data a controller holds about them. B. The right to request the deletion of data a controller holds about them. C. The right to opt-out...
A well-known video production company, based in Spain but specializing in documentaries filmed worldwide, has just finished recording several hours of footage featuring senior citizens in the streets of Madrid. Under what condition would the company NOT be required to obtain the consent of everyone whose image they use for their documentary?
A well-known video production company, based in Spain but specializing in documentaries filmed worldwide, has just finished recording several hours of footage featuring senior citizens in the streets of Madrid. Under what condition would the company NOT be required to obtain the consent of everyone whose image they use for...
Which of the following facts about Dynaroux would trigger a data protection impact assessment under the GDPR?
SCENARIO Please use the following to answer the next question: Dynaroux Fashion (‘Dynaroux’) is a successful international online clothing retailer that employs approximately 650 people at its headquarters based in Dublin, Ireland. Ronan is their recently appointed data protection officer, who oversees the company’s compliance with the General Data Protection...
Which of the following is NOT considered a fair processing practice in relation to the transparency principle?
Which of the following is NOT considered a fair processing practice in relation to the transparency principle?A . Providing a multi-layered privacy notice, in a website environment.B . Providing a QR code linking to more detailed privacy notice, in a CCTV sign.C . Providing a hyperlink to the organization’s home...
Under the GDPR, what is the online shop’s PRIMARY obligation while engaging in this kind of profiling?
A U.S.-based online shop uses sophisticated software to track the browsing behavior of its European customers and predict future purchases. It also shares this information with third parties. Under the GDPR, what is the online shop’s PRIMARY obligation while engaging in this kind of profiling?A . It must solicit informed...
Which statement provides an accurate description of a directive?
Which statement provides an accurate description of a directive?A . A directive speo5es certain results that must be achieved, but each member state is free to decide how to turn it into a national lawB . A directive has binding legal force throughout every member state and enters into force...
Why can the homeowner NOT depend on the household exemption with regards to the processing of the video images recorded by the surveillance camera system?
A homeowner has installed a motion-detecting surveillance system that films his front doc and entryway. The camera does not film any public areas only areas that are the property of the homeowner. The system has seen declared to the authorities per the homeowner's country law, and a placard indicating the...