What is true if an employee makes an access request to his employer for any personal data held about him?

What is true if an employee makes an access request to his employer for any personal data held about him?A . The employer can automatically decline the request if it contains personal data about a third person.B . The employer can decline the request if the information is only held...

September 20, 2023 No Comments READ MORE +

What are the obligations of a processor that engages a sub-processor?

What are the obligations of a processor that engages a sub-processor?A . The processor must give the controller prior written notice and perform a preliminary audit of the sub- processor.B . The processor must obtain the controller’s specific written authorization and provide annual reports on the sub-processor’s performance.C . The...

September 20, 2023 No Comments READ MORE +

Which of the following would NOT be relevant when determining if a processing activity would be considered profiling?

Which of the following would NOT be relevant when determining if a processing activity would be considered profiling?A . If the processing is to be performed by a third-party vendorB . If the processing involves data that is considered personal dataC . If the processing of the data is done...

September 20, 2023 No Comments READ MORE +

As a result of Sam’s actions, the Gummy Bear Company potentially violated Articles 33 and 34 of the GDPR and will be required to do what?

SCENARIO Please use the following to answer the next question: Joe started the Gummy Bear Company in 2000 from his home in Vermont, USA. Today, it is a multi-billion-dollar candy company operating in every continent. All of the company’s IT servers are located in Vermont. This year Joe hires his...

September 20, 2023 No Comments READ MORE +

After detecting an intrusion involving the theft of unencrypted personal data, who shall the breached company notify first under GDPR requirements?

After detecting an intrusion involving the theft of unencrypted personal data, who shall the breached company notify first under GDPR requirements?A . Any parents of children whose personal data was compromised.B . Any affected customers whose data was compromised.C . A competent supervisory authority.D . A local law enforcement agencyView...

September 20, 2023 No Comments READ MORE +

What is a reason the European Court of Justice declared the Data Retention Directive invalid in 2014?

What is a reason the European Court of Justice declared the Data Retention Directive invalid in 2014?A . The requirements affected individuals without exception.B . The requirements were financially burdensome to EU businesses.C . The requirements specified that data must be held within the EU.D . The requirements had limitations...

September 20, 2023 No Comments READ MORE +

In the Planet 49 case, what was the man judgement of the Coon of Justice of the European Union (CJEU) regarding the issue of cookies?

In the Planet 49 case, what was the man judgement of the Coon of Justice of the European Union (CJEU) regarding the issue of cookies?A . If the cookies do not track personal data, then pre-checked boxes are acceptable.B . If the ePrivacy Directive requires consent for cookies, then the...

September 19, 2023 No Comments READ MORE +

If Who-R-U adopts the We-Track-U pilot plan, why is it likely to be subject to the territorial scope of the GDPR?

SCENARIO Please use the following to answer the next question: Joe is the new privacy manager for Who-R-U, a Canadian business that provides DNA analysis. The company is headquartered in Montreal, and all of its employees are located there. The company offers its services to Canadians only: Its website is...

September 19, 2023 No Comments READ MORE +

Why can the homeowner NOT depend on the household exemption with regards to the processing of the video images recorded by the surveillance camera system?

A homeowner has installed a motion-detecting surveillance system that films his front doc and entryway. The camera does not film any public areas only areas that are the property of the homeowner. The system has seen declared to the authorities per the homeowner's country law, and a placard indicating the...

September 19, 2023 No Comments READ MORE +

What is the consequence if a processor makes an independent decision regarding the purposes and means of processing it carries out on behalf of a controller?

What is the consequence if a processor makes an independent decision regarding the purposes and means of processing it carries out on behalf of a controller?A . The controller will be liable to pay an administrative fineB . The processor will be liable to pay compensation to affected data subjectsC...

September 19, 2023 No Comments READ MORE +