- All Exams Instant Download
Which statement provides an accurate description of a directive?
Which statement provides an accurate description of a directive?A . A directive speo5es certain results that must be achieved, but each member state is free to decide how to turn it into a national lawB . A directive has binding legal force throughout every member state and enters into force...
Which of the following is NOT considered a fair processing practice in relation to the transparency principle?
Which of the following is NOT considered a fair processing practice in relation to the transparency principle?A . Providing a multi-layered privacy notice, in a website environment.B . Providing a QR code linking to more detailed privacy notice, in a CCTV sign.C . Providing a hyperlink to the organization’s home...
Based on GDPR Article 35, which of the following situations would trigger the need to complete a DPIA?
Based on GDPR Article 35, which of the following situations would trigger the need to complete a DPIA?A . A company wants to combine location data with other data in order to offer more personalized service for the customer.B . A company wants to use location data to infer information...
Why is Bioface subject to the territorial scope of the General Data Protection Regulation?
Bioface is a company based in the United States. It has no servers, personnel or assets in the European Union. By collecting photographs from social media and other web-based services, such as newspapers and blogs, it uses machine learning to develop a facial recognition algorithm. The algorithm identifies individuals in...
Which change was introduced by the 2009 amendments to the e-Privacy Directive 2002/58/EC?
Which change was introduced by the 2009 amendments to the e-Privacy Directive 2002/58/EC?A . A voluntary notification for personal data breaches applicable to all data controllers.B . A voluntary notification for personal data breaches applicable to electronic communication providers.C . A mandatory notification for personal data breaches applicable to all...
When would a data subject NOT be able to exercise the right to portability?
When would a data subject NOT be able to exercise the right to portability?A . When the processing is necessary to perform a task in the exercise of authority vested in the controller.B . When the processing is carried out pursuant to a contract with the data subject.C . When...
Based on current trends in European privacy practices, which aspect of Brady Box’ Online Behavioral Advertising (OBA) is most likely to be insufficient if the company becomes established in Europe?
SCENARIO Please use the following to answer the next question: Brady is a computer programmer based in New Zealand who has been running his own business for two years. Brady’s business provides a low-cost suite of services to customers throughout the European Economic Area (EEA). The services are targeted towards...
When is data sharing agreement MOST likely to be needed?
When is data sharing agreement MOST likely to be needed?A . When anonymized data is being shared.B . When personal data is being shared between commercial organizations acting as joint data controllers.C . When personal data is being proactively shared by a controller to support a police investigation.D . When...
Since blockchain transactions are classified as pseudonymous, are they considered to be within the material scope of the GDPR or outside of it?
Since blockchain transactions are classified as pseudonymous, are they considered to be within the material scope of the GDPR or outside of it?A . Outside the material scope of the GDPR, because transactions do not include personal data about data subjects m the European Union.B . Within the material scope...
It a company receives an anonymous email demanding ransom for the stolen personal data of its clients, what must the company do next, per GDPR requirements'3
It a company receives an anonymous email demanding ransom for the stolen personal data of its clients, what must the company do next, per GDPR requirements'3A . Notify the police and Tile a criminal complaint about the incidentB . Start an investigation to understand the incident's possible scope, duration and...
