- All Exams Instant Download
Why does the Spanish supervisory authority notify the French supervisory authority when it opens an investigation into T-Craze based on Sofia’s complaint?
SCENARIO Please use the following to answer the next question: T-Craze, a German-headquartered specialty t-shirt company, was successfully selling to large German metropolitan cities. However, after a recent merger with another German-based company that was selling to a broader European market, T-Craze revamped its marketing efforts to sell to a...
In addition to notifying employees about the purpose of the monitoring, the potential uses of their data and their privacy rights, what information should Building Block have provided them before implementing the security measures?
SCENARIO Please use the following to answer the next question: Building Block Inc. is a multinational company, headquartered in Chicago with offices throughout the United States, Asia, and Europe (including Germany, Italy, France and Portugal). Last year the company was the victim of a phishing attack that resulted in a...
In the Planet 49 case, what was the man judgement of the Coon of Justice of the European Union (CJEU) regarding the issue of cookies?
In the Planet 49 case, what was the man judgement of the Coon of Justice of the European Union (CJEU) regarding the issue of cookies?A . If the cookies do not track personal data, then pre-checked boxes are acceptable.B . If the ePrivacy Directive requires consent for cookies, then the...
In which case would a controller who has undertaken a DPIA most likely need to consult with a supervisory authority?
In which case would a controller who has undertaken a DPIA most likely need to consult with a supervisory authority? A. Where the DPIA identifies that personal data needs to be transferred to other countries outside of the EEA. B. Where the DPIA identifies high risks to individuals’ rights and...
The origin of privacy as a fundamental human right can be found in which document?
The origin of privacy as a fundamental human right can be found in which document?A . Universal Declaration of Human Rights 1948.B . European Convention of Human Rights 1953.C . OECD Guidelines on the Protection of Privacy 1980.D . Charier of Fundamental Rights of the European Union 2000.View AnswerAnswer: A
Which of the following countries will continue to enjoy adequacy status under the GDPR, pending any future European Commission decision to the contrary?
Which of the following countries will continue to enjoy adequacy status under the GDPR, pending any future European Commission decision to the contrary?A . GreeceB . NorwayC . AustraliaD . SwitzerlandView AnswerAnswer: D Explanation: Reference: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en
What is the main task of the European Data Protection Board?
What is the main task of the European Data Protection Board?A . To assess adequacy of data protection in third countriesB . To ensure consistent application of the GDPR.C . To proactively prevent disputes between national supervisory authorities.D . To publish guidelines tor data subjects on how to property enforce...
For which of the following operations would an employer most likely be justified in requesting the data subject’s consent?
For which of the following operations would an employer most likely be justified in requesting the data subject’s consent?A . Posting an employee’s bicycle race photo on the company’s social media.B . Processing an employee’s health certificate in order to provide sick leave.C . Operating a CCTV system on company...
Which sentence best describes proper compliance for an international organization using Binding Corporate Rules (BCRs) as a controller or processor?
Which sentence best describes proper compliance for an international organization using Binding Corporate Rules (BCRs) as a controller or processor?A . Employees must sign an ad hoc contractual agreement each time personal data is exported.B . All employees are subject to the rules in their entirety, regardless of where the...
How does the GDPR now define “processing”?
How does the GDPR now define “processing”?A . Any act involving the collecting and recording of personal data.B . Any operation or set of operations performed on personal data or on sets of personal data.C . Any use or disclosure of personal data compatible with the purpose for which the...
