- All Exams Instant Download
Before Anna determines whether Frank’s performance database is permissible, what additional information does she need?
SCENARIO Please use the following to answer the next question: Anna and Frank both work at Granchester University. Anna is a lawyer responsible for data protection, while Frank is a lecturer in the engineering department. The University maintains a number of types of records: - Student records, including names, student...
How does the GDPR now define “processing”?
How does the GDPR now define “processing”?A . Any act involving the collecting and recording of personal data.B . Any operation or set of operations performed on personal data or on sets of personal data.C . Any use or disclosure of personal data compatible with the purpose for which the...
Which aspect of the GDPR will likely have the most impact on the consistent implementation of data protection laws throughout the European Union?
Which aspect of the GDPR will likely have the most impact on the consistent implementation of data protection laws throughout the European Union?A . That it essentially functions as a one-stop shop mechanismB . That it takes the form of a Regulation as opposed to a DirectiveC . That it...
According to the GDPR, how is pseudonymous personal data defined?
According to the GDPR, how is pseudonymous personal data defined?A . Data that can no longer be attributed to a specific data subject without the use of additional information kept separately.B . Data that can no longer be attributed to a specific data subject, with no possibility of re-identifying the...
To ensure GDPR compliance, what should be the company’s position on the issue of consent?
SCENARIO Please use the following to answer the next question: You have just been hired by a toy manufacturer based in Hong Kong. The company sells a broad range of dolls, action figures and plush toys that can be found internationally in a wide variety of retail stores. Although the...
What is true of both the General Data Protection Regulation (GDPR) and the Council of Europe Convention 108?
What is true of both the General Data Protection Regulation (GDPR) and the Council of Europe Convention 108?A . Both govern international transfers of personal dataB . Both govern the manual processing of personal dataC . Both only apply to European Union countriesD . Both require notification of processing activities...
Which GDPR principle is she following?
Tanya is the Data Protection Officer for Curtains Inc., a GDPR data controller. She has recommended that the company encrypt all personal data at rest. Which GDPR principle is she following?A . AccuracyB . Storage LimitationC . Integrity and confidentialityD . Lawfulness, fairness and transparencyView AnswerAnswer: C Explanation: Reference: https://www.icaew.com/technical/technology/data/data-protection/data-protection-articles/do-i-have-to-encrypt-personal-data-to-comply-with-dpa-2018
Which statement accurately summarizes Bedrock’s obligation in regard to Louis’s data portability request?
SCENARIO Please use the following to answer the next question: Louis, a long-time customer of Bedrock Insurance, was involved in a minor car accident a few months ago. Although no one was hurt, Louis has been plagued by texts and calls from a company called Accidentable offering to help him...
What parts of the General Data Protection Regulation (GDPR) provide the closest equivalent to that principle?
A key component of the OECD Guidelines is the “Individual Participation Principle”. What parts of the General Data Protection Regulation (GDPR) provide the closest equivalent to that principle?A . The lawful processing criteria stipulated by Articles 6 to 9B . The information requirements set out in Articles 13 and 14C...
When collecting personal data in a European Union (EU) member state, what must a company do if it collects personal data from a source other than the data subjects themselves?
When collecting personal data in a European Union (EU) member state, what must a company do if it collects personal data from a source other than the data subjects themselves?A . Inform the subjects about the collectionB . Provide a public notice regarding the dataC . Upgrade security to match...
