- All Exams Instant Download
Which of the following would MOST likely trigger the extraterritorial effect of the GDPR, as specified by Article 3?
Which of the following would MOST likely trigger the extraterritorial effect of the GDPR, as specified by Article 3?A . The behavior of suspected terrorists being monitored by EU law enforcement bodies.B . Personal data of EU citizens being processed by a controller or processor based outside the EU.C ....
What is the MAIN reason GDPR Article 4(22) establishes the concept of the “concerned supervisory authority”?
What is the MAIN reason GDPR Article 4(22) establishes the concept of the “concerned supervisory authority”?A . To encourage the consistency of local data processing activity.B . To give corporations a choice about who their supervisory authority will be.C . To ensure the GDPR covers controllers that do not have...
What obligation does a data controller or processor have after appointing a data protection officer?
What obligation does a data controller or processor have after appointing a data protection officer?A . To ensure that the data protection officer receives sufficient instructions regarding the exercise of his or her defined tasks.B . To provide resources necessary to carry out the defined tasks of the data protection...
The origin of privacy as a fundamental human right can be found in which document?
The origin of privacy as a fundamental human right can be found in which document?A . Universal Declaration of Human Rights 1948.B . European Convention of Human Rights 1953.C . OECD Guidelines on the Protection of Privacy 1980.D . Charier of Fundamental Rights of the European Union 2000.View AnswerAnswer: A
As a result of Sam’s actions, the Gummy Bear Company potentially violated Articles 33 and 34 of the GDPR and will be required to do what?
SCENARIO Please use the following to answer the next question: Joe started the Gummy Bear Company in 2000 from his home in Vermont, USA. Today, it is a multi-billion-dollar candy company operating in every continent. All of the company’s IT servers are located in Vermont. This year Joe hires his...
Which mechanism, new to the GDPR, now allows for the possibility of personal data transfers to third countries under Article 42?
Which mechanism, new to the GDPR, now allows for the possibility of personal data transfers to third countries under Article 42?A . Approved certifications.B . Binding corporate rules.C . Law enforcement requests.D . Standard contractual clauses.View AnswerAnswer: A Explanation: Reference: https://www.anonos.com/gdpr-chapter-5-transfers-of-personal-data-to-third-countries-or-international-organisations
What transfer mechanism did ProStorage most likely rely on to transfer Ruth's medical information to the hospital?
SCENARIO Please use the following to answer the next question: ProStorage is a multinational cloud storage provider headquartered in the Netherlands. Its CEO. Ruth Brown, has developed a two-pronged strategy for growth: 1) expand ProStorage s global customer base and 2) increase ProStorage's sales force by efficiently onboarding effective teams....
Jane Stan's her new role as a Data Protection Officer (DPO) at a Malta-based company that allows anyone to buy and sell cryptocurrencies via its online platform. The company stores and processes the personal data of its customers in a dedicated data center located in Malta (EU)
SCENARIO Please use the following to answer the next question: Jane Stan's her new role as a Data Protection Officer (DPO) at a Malta-based company that allows anyone to buy and sell cryptocurrencies via its online platform. The company stores and processes the personal data of its customers in a...
Why is Bioface subject to the territorial scope of the General Data Protection Regulation?
Bioface is a company based in the United States. It has no servers, personnel or assets in the European Union. By collecting photographs from social media and other web-based services, such as newspapers and blogs, it uses machine learning to develop a facial recognition algorithm. The algorithm identifies individuals in...
Under which of the following conditions does the General Data Protection Regulation NOT apply to the processing of personal data?
Under which of the following conditions does the General Data Protection Regulation NOT apply to the processing of personal data? A. When the personal data is processed only in non-electronic form B. When the personal data is collected and then pseudonymised by the controller C. When the personal data is...
