- All Exams Instant Download
Which of the below would be the BEST example of processing that could utilise the Public Interest Task lawful basis?
Which of the below would be the BEST example of processing that could utilise the Public Interest Task lawful basis?A . A health authority processing the personal information of its staff in order to record all training undertakenB . A debt collection agency processing information relating to unpaid fines for...
What is the basis of the accountability and data governance obligation (Article 5 (2) of the GDPR)?
What is the basis of the accountability and data governance obligation (Article 5 (2) of the GDPR)?A . The controller shall appoint a DPO before carrying out large scale processingB . The controller shall be responsible for. and be able to demonstrate compliance with the data protection principles.C . Controllers...
What is the meaning of storage limitation in relation to UK GDPR Article 5 (1)(e)?
What is the meaning of storage limitation in relation to UK GDPR Article 5 (1)(e)?A . Keeping identifiable personal data for no longer than is necessary for the intended processingB . Storing data in a secure format only permitting access to those with a business needC . Only storing data...
Who is entitled to a private life by law in the UK?
Who is entitled to a private life by law in the UK?A . All individuals.B . All individuals save for Members of ParliamentC . Private individuals who do not conduct their business on public platforms (such as professional sports people and actorsD . NobodyView AnswerAnswer: A Explanation: The right to...
A company has twenty retail outlets in France and thirty retail outlets in Belgium. The payroll department and the Data Protection Officer are based in Poland. The Company Board and administrative functions are based in Germany. Determine where the company's 'main establishment' would be
A company has twenty retail outlets in France and thirty retail outlets in Belgium. The payroll department and the Data Protection Officer are based in Poland. The Company Board and administrative functions are based in Germany. Determine where the company's 'main establishment' would beA . BelgiumB . FranceC . GermanyD...
Of the following options which is NOT a purpose of carrying out a Data Protection Impact Assessment (DPIA)?
Of the following options which is NOT a purpose of carrying out a Data Protection Impact Assessment (DPIA)?A . It is necessary to fulfil the requirement that all DPIAs are submitted to the ICOB . It is key to the accountability element of the GDPR.C . It fulfils a requirement...
When were data protection rights first introduced into UK law'?
When were data protection rights first introduced into UK law'?A . 2000 (Data Protection Act 1998)B . 1992 (Data Protection Act 1992).C . 1984 (Data Protection Act 1984).D . 2018 (Data Protection Act 2018)View AnswerAnswer: C Explanation: Data protection rights were first introduced into UK law by the Data Protection...
Article 9(2)(c) of UK GDPR condition of processing special category data in the vital interests of the data subject is only applicable in which of the following circumstances:
Article 9(2)(c) of UK GDPR condition of processing special category data in the vital interests of the data subject is only applicable in which of the following circumstances:A . When another lawful basis applies.B . When a data subject is incapacitatedC . When the data subject is physically unable to...
Under which circumstances can the 'domestic purposes' exemption be used to justify non-compliance with the Data Protection Act 2018?
Under which circumstances can the 'domestic purposes' exemption be used to justify non-compliance with the Data Protection Act 2018? A) An individual sells make up products for commission and uses social media to promote products to friends and family B) A couple are planning their daughter's wedding and use excel...
While working through the DPIA, which of the following is NOT a requirement?
You are a consulting Data Protection Officer (DPO) for a holiday resort You have been asked to conduct a Data Protection Impact Assessment (DPIA) for them in advance of adopting a new HR management database. While working through the DPIA, which of the following is NOT a requirement?A . Describe...
