CIPP-E

Which aspect of the GDPR will likely have the most impact on the consistent implementation of data protection laws throughout the European Union?A . That it essentially functions as a one-stop shop mechanismB . That it takes the form of a Regulation as opposed to a DirectiveC . That it...

According to the GDPR, how is pseudonymous personal data defined?A . Data that can no longer be attributed to a specific data subject without the use of additional information kept separately.B . Data that can no longer be attributed to a specific data subject, with no possibility of re-identifying the...

SCENARIO Please use the following to answer the next question: You have just been hired by a toy manufacturer based in Hong Kong. The company sells a broad range of dolls, action figures and plush toys that can be found internationally in a wide variety of retail stores. Although the...

What is true of both the General Data Protection Regulation (GDPR) and the Council of Europe Convention 108?A . Both govern international transfers of personal dataB . Both govern the manual processing of personal dataC . Both only apply to European Union countriesD . Both require notification of processing activities...

Tanya is the Data Protection Officer for Curtains Inc., a GDPR data controller. She has recommended that the company encrypt all personal data at rest. Which GDPR principle is she following?A . AccuracyB . Storage LimitationC . Integrity and confidentialityD . Lawfulness, fairness and transparencyView AnswerAnswer: C Explanation: Reference: https://www.icaew.com/technical/technology/data/data-protection/data-protection-articles/do-i-have-to-encrypt-personal-data-to-comply-with-dpa-2018

SCENARIO Please use the following to answer the next question: Louis, a long-time customer of Bedrock Insurance, was involved in a minor car accident a few months ago. Although no one was hurt, Louis has been plagued by texts and calls from a company called Accidentable offering to help him...

A key component of the OECD Guidelines is the “Individual Participation Principle”. What parts of the General Data Protection Regulation (GDPR) provide the closest equivalent to that principle?A . The lawful processing criteria stipulated by Articles 6 to 9B . The information requirements set out in Articles 13 and 14C...

When collecting personal data in a European Union (EU) member state, what must a company do if it collects personal data from a source other than the data subjects themselves?A . Inform the subjects about the collectionB . Provide a public notice regarding the dataC . Upgrade security to match...

SCENARIO Please use the following to answer the next question: Due to rapidly expanding workforce, Company A has decided to outsource its payroll function to Company B. Company B is an established payroll service provider with a sizable client base and a solid reputation in the industry. Company B’s payroll...

What is the consequence if a processor makes an independent decision regarding the purposes and means of processing it carries out on behalf of a controller?A . The controller will be liable to pay an administrative fineB . The processor will be liable to pay compensation to affected data subjectsC...