Under the cooperation mechanism, what should the lead authority (the CNIL) do after it has formed its view on the matter?

SCENARIO Please use the following to answer the next question: Javier is a member of the fitness club EVERFIT. This company has branches in many EU member states, but for the purposes of the GDPR maintains its primary establishment in France. Javier lives in Newry, Northern Ireland (part of the...

January 17, 2024 No Comments READ MORE +

When would a data subject NOT be able to exercise the right to portability?

When would a data subject NOT be able to exercise the right to portability?A . When the processing is necessary to perform a task in the exercise of authority vested in the controller.B . When the processing is carried out pursuant to a contract with the data subject.C . When...

January 17, 2024 No Comments READ MORE +

Which of the following factors would NOT in itself subject the company to the GDPR?

A U.S. company’s website sells widgets. Which of the following factors would NOT in itself subject the company to the GDPR?A . The widgets are offered in EU and priced in euro.B . The website is in English and French, and is accessible in France.C . An affiliate office is...

January 17, 2024 No Comments READ MORE +

Since blockchain transactions are classified as pseudonymous, are they considered to be within the material scope of the GDPR or outside of it?

Since blockchain transactions are classified as pseudonymous, are they considered to be within the material scope of the GDPR or outside of it?A . Outside the material scope of the GDPR, because transactions do not include personal data about data subjects m the European Union.B . Within the material scope...

November 25, 2023 No Comments READ MORE +

Under the cooperation mechanism, what should the lead authority (the CNIL) do after it has formed its view on the matter?

SCENARIO Please use the following to answer the next question: Javier is a member of the fitness club EVERFIT. This company has branches in many EU member states, but for the purposes of the GDPR maintains its primary establishment in France. Javier lives in Newry, Northern Ireland (part of the...

November 25, 2023 No Comments READ MORE +

Based on current trends in European privacy practices, which aspect of Brady Box’ Online Behavioral Advertising (OBA) is most likely to be insufficient if the company becomes established in Europe?

SCENARIO Please use the following to answer the next question: Brady is a computer programmer based in New Zealand who has been running his own business for two years. Brady’s business provides a low-cost suite of services to customers throughout the European Economic Area (EEA). The services are targeted towards...

November 25, 2023 No Comments READ MORE +

Under Article 58 of the GDPR, which of the following describes a power of supervisory authorities in European Union (EU) member states?

Under Article 58 of the GDPR, which of the following describes a power of supervisory authorities in European Union (EU) member states?A . The ability to enact new laws by executive order.B . The right to access data for investigative purposes.C . The discretion to carry out goals of elected...

November 25, 2023 No Comments READ MORE +

When is data sharing agreement MOST likely to be needed?

When is data sharing agreement MOST likely to be needed?A . When anonymized data is being shared.B . When personal data is being shared between commercial organizations acting as joint data controllers.C . When personal data is being proactively shared by a controller to support a police investigation.D . When...

November 24, 2023 No Comments READ MORE +

When does the GDPR provide more latitude for a company to process data beyond its original collection purpose?

When does the GDPR provide more latitude for a company to process data beyond its original collection purpose?A . When the data has been pseudonymized.B . When the data is protected by technological safeguards.C . When the data serves legitimate interest of third parties.D . When the data subject has...

November 24, 2023 No Comments READ MORE +

In addition to notifying employees about the purpose of the monitoring, the potential uses of their data and their privacy rights, what information should Building Block have provided them before implementing the security measures?

SCENARIO Please use the following to answer the next question: Building Block Inc. is a multinational company, headquartered in Chicago with offices throughout the United States, Asia, and Europe (including Germany, Italy, France and Portugal). Last year the company was the victim of a phishing attack that resulted in a...

November 24, 2023 No Comments READ MORE +