- All Exams Instant Download
In which of the following cases would an organization MOST LIKELY be required to follow both ePrivacy and data protection rules?
In which of the following cases would an organization MOST LIKELY be required to follow both ePrivacy and data protection rules?A . When creating an untargeted pop-up ad on a website.B . When calling a potential customer to notify her of an upcoming product sale.C . When emailing a customer...
Which of the following is NOT recognized as being a common characteristic of cloud-computing services?
Which of the following is NOT recognized as being a common characteristic of cloud-computing services?A . The service’s infrastructure is shared among the supplier’s customers and can be located in a number of countries.B . The supplier determines the location, security measures, and service standards applicable to the processing.C ....
Which of the following was the first to implement national law for data protection in 1973?
Which of the following was the first to implement national law for data protection in 1973?A . FranceB . SwedenC . GermanyD . United KingdomView AnswerAnswer: B Explanation: Reference: https://scandinavianlaw.se/pdf/47-18.pdf
What ruling did the Planet 49 CJEU judgment make regarding the issue of pre-ticked boxes?
What ruling did the Planet 49 CJEU judgment make regarding the issue of pre-ticked boxes?A . They are allowed if determined to be technically necessary.B . They do not amount to valid consent under any circumstances.C . They are allowed if recorded In the register of processing activities.D . They...
Which of the following explains why the website operator, who is the responsible for all processing related to account creation and subscriptions, is NOT required to comply with the GDPR?
A news website based m (he United Slates reports primarily on North American events The website is accessible to any user regardless of location, as the website operator does not block connections from outside of the U.S. The website offers a pad subscription that requires the creation of a user...
Based on GDPR Article 35, which of the following situations would trigger the need to complete a DPIA?
Based on GDPR Article 35, which of the following situations would trigger the need to complete a DPIA?A . A company wants to combine location data with other data in order to offer more personalized service for the customer.B . A company wants to use location data to infer information...
Which mechanism, new to the GDPR, now allows for the possibility of personal data transfers to third countries under Article 42?
Which mechanism, new to the GDPR, now allows for the possibility of personal data transfers to third countries under Article 42?A . Approved certifications.B . Binding corporate rules.C . Law enforcement requests.D . Standard contractual clauses.View AnswerAnswer: A Explanation: Reference: https://www.anonos.com/gdpr-chapter-5-transfers-of-personal-data-to-third-countries-or-international-organisations
What obligation does a data controller or processor have after appointing a data protection officer?
What obligation does a data controller or processor have after appointing a data protection officer?A . To ensure that the data protection officer receives sufficient instructions regarding the exercise of his or her defined tasks.B . To provide resources necessary to carry out the defined tasks of the data protection...
According to Art 23 GDPR, which of the following data subject rights can NOT be restricted?
According to Art 23 GDPR, which of the following data subject rights can NOT be restricted?A . Right to restriction of processing.B . Right to erasure ("Right to be forgotten").C . Right to lodge a complaint with a supervisory authority.D . Right not to be subject to automated individual decision-makingView...
If a French controller has a car-sharing app available only in Morocco, Algeria and Tunisia, but the data processing activities are carried out by the appointed processor in Spain, the GDPR will apply to the processing of the personal data so long as?
If a French controller has a car-sharing app available only in Morocco, Algeria and Tunisia, but the data processing activities are carried out by the appointed processor in Spain, the GDPR will apply to the processing of the personal data so long as?A . The individuals are European citizens or...
