- All Exams Instant Download
Which of the following was listed as a method that would NOT be effective for communicating a breach to data subjects?
WP29’s “Guidelines on Personal data breach notification under Regulation 2016/679’’ provides examples of ways to communicate data breaches transparently. Which of the following was listed as a method that would NOT be effective for communicating a breach to data subjects?A . A postal notificationB . A direct electronic messageC ....
Which of the following would most likely NOT be covered by the definition of “personal data” under the GDPR?
Which of the following would most likely NOT be covered by the definition of “personal data” under the GDPR?A . The payment card number of a Dutch citizenB . TheD . social security number of an American citizen living in FranceE . The unlinked aggregated data used for statistical purposes...
Under the GDPR, which essential pieces of information must be provided to data subjects before collecting their personal data?
Under the GDPR, which essential pieces of information must be provided to data subjects before collecting their personal data?A . The authority by which the controller is collecting the data and the third parties to whom the data will be sent.B . The name/s of relevant government agencies involved and...
Which of the following would require designating a data protection officer?
Which of the following would require designating a data protection officer?A . Processing is carried out by an organization employing 250 persons or more.B . Processing is carried out for the purpose of providing for-profit goods or services to individuals in the ED . The core activities of the controller...
Which of the following would MOST likely trigger the extraterritorial effect of the GDPR, as specified by Article 3?
Which of the following would MOST likely trigger the extraterritorial effect of the GDPR, as specified by Article 3?A . The behavior of suspected terrorists being monitored by EU law enforcement bodies.B . Personal data of EU citizens being processed by a controller or processor based outside the ED ....
What presents the BIGGEST potential privacy issue with the company’s practices?
SCENARIO Please use the following to answer the next question: You have just been hired by a toy manufacturer based in Hong Kong. The company sells a broad range of dolls, action figures and plush toys that can be found internationally in a wide variety of retail stores. Although the...
What is true of both the General Data Protection Regulation (GDPR) and the Council of Europe Convention 108?
What is true of both the General Data Protection Regulation (GDPR) and the Council of Europe Convention 108?A . Both govern international transfers of personal dataB . Both govern the manual processing of personal dataC . Both only apply to European Union countriesD . Both require notification of processing activities...
In the Guidelines on Automated individual decision-making and Profiling, the WP 29 says the controller needs to do all of the following to demonstrate that it has such legitimate grounds EXCEPT?
Under Article 21 of the GDPR, a controller must stop profiling when requested by a data subject, unless it can demonstrate compelling legitimate grounds that override the interests of the individual. In the Guidelines on Automated individual decision-making and Profiling, the WP 29 says the controller needs to do all...
What would be the most realistic way that Company B could have fulfilled this requirement?
SCENARIO Please use the following to answer the next question: Due to rapidly expanding workforce, Company A has decided to outsource its payroll function to Company B. Company B is an established payroll service provider with a sizable client base and a solid reputation in the industry. Company B’s payroll...
To ensure GDPR compliance, what should be the company’s position on the issue of consent?
SCENARIO Please use the following to answer the next question: You have just been hired by a toy manufacturer based in Hong Kong. The company sells a broad range of dolls, action figures and plush toys that can be found internationally in a wide variety of retail stores. Although the...
