Which institution has the power to adopt findings that confirm the adequacy of the data protection level in a non-EU country?

Which institution has the power to adopt findings that confirm the adequacy of the data protection level in a non-EU country?A . The European ParliamentB . The European CommissionC . The Article 29 Working PartyD . The European CouncilView AnswerAnswer: B Explanation: Reference: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en

November 19, 2020 No Comments READ MORE +

Which of the following would MOST likely trigger the extraterritorial effect of the GDPR, as specified by Article 3?

Which of the following would MOST likely trigger the extraterritorial effect of the GDPR, as specified by Article 3?A . The behavior of suspected terrorists being monitored by EU law enforcement bodies.B . Personal data of EU citizens being processed by a controller or processor based outside the ED ....

November 19, 2020 1 Comment READ MORE +

Which statement is correct when considering the right to privacy under Article 8 of the European Convention on Human Rights (ECHR)?

Which statement is correct when considering the right to privacy under Article 8 of the European Convention on Human Rights (ECHR)?A . The right to privacy is an absolute rightB . The right to privacy has to be balanced against other rights under the ECHRC . The right to freedom...

November 19, 2020 No Comments READ MORE +

With the issue of consent, the GDPR allows member states some choice regarding what?

With the issue of consent, the GDPR allows member states some choice regarding what?A . The mechanisms through which consent may be communicatedB . The circumstances in which silence or inactivity may constitute consentC . The age at which children must be required to obtain parental consentD . The timeframe...

November 19, 2020 No Comments READ MORE +

Under the GDPR, who would be LEAST likely to be allowed to engage in the collection, use, and disclosure of a data subject’s sensitive medical information without the data subject’s knowledge or consent?

Under the GDPR, who would be LEAST likely to be allowed to engage in the collection, use, and disclosure of a data subject’s sensitive medical information without the data subject’s knowledge or consent?A . A member of the judiciary involved in adjudicating a legal dispute involving the data subject and...

November 18, 2020 No Comments READ MORE +

Which EU institution is vested with the competence to propose new data protection legislation on its own initiative?

Which EU institution is vested with the competence to propose new data protection legislation on its own initiative?A . The European CouncilB . The European ParliamentC . The European CommissionD . The Council of the European UnionView AnswerAnswer: C Explanation: Reference: https://www.tandfonline.com/doi/full/10.1080/13600834.2019.1573501

November 18, 2020 No Comments READ MORE +

Which of the following would most likely NOT be covered by the definition of “personal data” under the GDPR?

Which of the following would most likely NOT be covered by the definition of “personal data” under the GDPR?A . The payment card number of a Dutch citizenB . TheD . social security number of an American citizen living in FranceE . The unlinked aggregated data used for statistical purposes...

November 18, 2020 No Comments READ MORE +

What parts of the General Data Protection Regulation (GDPR) provide the closest equivalent to that principle?

A key component of the OECD Guidelines is the “Individual Participation Principle”. What parts of the General Data Protection Regulation (GDPR) provide the closest equivalent to that principle?A . The lawful processing criteria stipulated by Articles 6 to 9B . The information requirements set out in Articles 13 and 14C...

November 18, 2020 No Comments READ MORE +

Which of the University’s records does Anna NOT have to include in her record of processing activities?

SCENARIO Please use the following to answer the next question: Anna and Frank both work at Granchester University. Anna is a lawyer responsible for data protection, while Frank is a lecturer in the engineering department. The University maintains a number of types of records: - Student records, including names, student...

November 18, 2020 1 Comment READ MORE +

To ensure GDPR compliance, what should be the company’s position on the issue of consent?

SCENARIO Please use the following to answer the next question: You have just been hired by a toy manufacturer based in Hong Kong. The company sells a broad range of dolls, action figures and plush toys that can be found internationally in a wide variety of retail stores. Although the...

November 17, 2020 No Comments READ MORE +