Which of the University’s records does Anna NOT have to include in her record of processing activities?

SCENARIO Please use the following to answer the next question: Anna and Frank both work at Granchester University. Anna is a lawyer responsible for data protection, while Frank is a lecturer in the engineering department. The University maintains a number of types of records: – Student records, including names, student numbers, home addresses, pre-university...

Continue reading

Under the GDPR, which essential pieces of information must be provided to data subjects before collecting their personal data?

Under the GDPR, which essential pieces of information must be provided to data subjects before collecting their personal data?A . The authority by which the controller is collecting the data and the third parties to whom the data will be sent.B . The name/s of relevant government agencies involved and the steps needed for...

Continue reading

In the Guidelines on Automated individual decision-making and Profiling, the WP 29 says the controller needs to do all of the following to demonstrate that it has such legitimate grounds EXCEPT?

Under Article 21 of the GDPR, a controller must stop profiling when requested by a data subject, unless it can demonstrate compelling legitimate grounds that override the interests of the individual. In the Guidelines on Automated individual decision-making and Profiling, the WP 29 says the controller needs to do all of the following to...

Continue reading

In 2016’s Guidance, the United Kingdom’s Information Commissioner’s Office (ICO) reaffirmed the importance of using a “layered notice” to provide data subjects with what?

In 2016’s Guidance, the United Kingdom’s Information Commissioner’s Office (ICO) reaffirmed the importance of using a “layered notice” to provide data subjects with what?A . A privacy notice containing brief information whilst offering access to further detail.B . A privacy notice explaining the consequences for opting out of the use of cookies on a...

Continue reading

A Spanish electricity customer calls her local supplier with questions about the company’s upcoming merger. Specifically, the customer wants to know the recipients to whom her personal data will be disclosed once the merger is final. According to Article 13 of the GDPR, what must the company do before providing the customer with the requested information?

A Spanish electricity customer calls her local supplier with questions about the company’s upcoming merger. Specifically, the customer wants to know the recipients to whom her personal data will be disclosed once the merger is final. According to Article 13 of the GDPR, what must the company do before providing the customer with the...

Continue reading

Which EU institution is vested with the competence to propose new data protection legislation on its own initiative?

Which EU institution is vested with the competence to propose new data protection legislation on its own initiative?A . The European CouncilB . The European ParliamentC . The European CommissionD . The Council of the European Union View Answer Answer: C Explanation: Reference: https://www.tandfonline.com/doi/full/10.1080/13600834.2019.1573501...

Continue reading

Before Anna determines whether Frank’s performance database is permissible, what additional information does she need?

SCENARIO Please use the following to answer the next question: Anna and Frank both work at Granchester University. Anna is a lawyer responsible for data protection, while Frank is a lecturer in the engineering department. The University maintains a number of types of records: – Student records, including names, student numbers, home addresses, pre-university...

Continue reading