- All Exams Instant Download
Under the GDPR, what is the online shop’s PRIMARY obligation while engaging in this kind of profiling?
A U.S.-based online shop uses sophisticated software to track the browsing behavior of its European customers and predict future purchases. It also shares this information with third parties. Under the GDPR, what is the online shop’s PRIMARY obligation while engaging in this kind of profiling?A . It must solicit informed...
Which statement provides an accurate description of a directive?
Which statement provides an accurate description of a directive?A . A directive speo5es certain results that must be achieved, but each member state is free to decide how to turn it into a national lawB . A directive has binding legal force throughout every member state and enters into force...
Why can the homeowner NOT depend on the household exemption with regards to the processing of the video images recorded by the surveillance camera system?
A homeowner has installed a motion-detecting surveillance system that films his front doc and entryway. The camera does not film any public areas only areas that are the property of the homeowner. The system has seen declared to the authorities per the homeowner's country law, and a placard indicating the...
Ben’s collection of additional data from customers created several potential issues for the company, which would most likely require what?
SCENARIO Please use the following to answer the next question: Joe started the Gummy Bear Company in 2000 from his home in Vermont, USA. Today, it is a multi-billion-dollar candy company operating in every continent. All of the company’s IT servers are located in Vermont. This year Joe hires his...
In which situation would a data controller most likely be able to justify the processing of the data of a child without parental consent?
In which situation would a data controller most likely be able to justify the processing of the data of a child without parental consent?A . When the data is to be processed for market research.B . When providing preventive or counselling services to the child.C . When providing the child...
An organization should perform these steps to do which of the following?
Read the following steps: ✑ Discover which employees are accessing cloud services and from which devices and apps Lock down the data in those apps and devices ✑ Monitor and analyze the apps and devices for compliance ✑ Manage application life cycles ✑ Monitor data sharing An organization should perform...
Under the GDPR, where personal data is not obtained directly from the data subject, a controller is exempt from directly providing information about processing to the data subject if?
Under the GDPR, where personal data is not obtained directly from the data subject, a controller is exempt from directly providing information about processing to the data subject if?A . The data subject already has information regarding how his data will be usedB . The provision of such information to...
A company wishes to transfer personal data to a country outside of the European Union/EEA In order to do so, they are planning an assessment of the country's laws and practices, knowing that these may impinge upon the transfer safeguards they intend to use All of the following factors would be relevant for the company to consider EXCEPT'?
A company wishes to transfer personal data to a country outside of the European Union/EEA In order to do so, they are planning an assessment of the country's laws and practices, knowing that these may impinge upon the transfer safeguards they intend to use All of the following factors would...
These organizations are commonly known as?
Under Article 80(1) of the GDPR, individuals can elect to be represented by not-for-profit organizations in a privacy group litigation or class action. These organizations are commonly known as?A . Law firm organizations.B . Civil society organizations.C . Human rights organizations.D . Constitutional rights organizations.View AnswerAnswer: B Explanation: Reference: https://gdpr-info.eu/art-80-gdpr/
Which of the following does NOT have to be included in the records most processors must maintain in relation to their data processing activities?
Which of the following does NOT have to be included in the records most processors must maintain in relation to their data processing activities?A . Name and contact details of each controller on behalf of which the processor is acting.B . Categories of processing carried out on behalf of each...
