What is the consequence if a processor makes an independent decision regarding the purposes and means of processing it carries out on behalf of a controller?

What is the consequence if a processor makes an independent decision regarding the purposes and means of processing it carries out on behalf of a controller?A . The controller will be liable to pay an administrative fineB . The processor will be liable to pay compensation to affected data subjectsC...

January 30, 2024 No Comments READ MORE +

Which of the following regulates the use of electronic communications services within the European Union?

Which of the following regulates the use of electronic communications services within the European Union?A . Regulator (EU) 2015/2120 of the European Parliament and of the Council of 25 November 2015.B . Regulation (EU) 2017/1953 of the European Parliament and of the Council of 25 October 2017.C . Directive 2002/58'EC...

January 30, 2024 No Comments READ MORE +

For which of the following operations would an employer most likely be justified in requesting the data subject’s consent?

For which of the following operations would an employer most likely be justified in requesting the data subject’s consent?A . Posting an employee’s bicycle race photo on the company’s social media.B . Processing an employee’s health certificate in order to provide sick leave.C . Operating a CCTV system on company...

January 30, 2024 No Comments READ MORE +

Why does the Spanish supervisory authority notify the French supervisory authority when it opens an investigation into T-Craze based on Sofia’s complaint?

SCENARIO Please use the following to answer the next question: T-Craze, a German-headquartered specialty t-shirt company, was successfully selling to large German metropolitan cities. However, after a recent merger with another German-based company that was selling to a broader European market, T-Craze revamped its marketing efforts to sell to a...

January 30, 2024 No Comments READ MORE +

The Customer for Life plan may conflict with which GDPR provision?

SCENARIO Please use the following to answer the next question: Joe is the new privacy manager for Who-R-U, a Canadian business that provides DNA analysis. The company is headquartered in Montreal, and all of its employees are located there. The company offers its services to Canadians only: Its website is...

January 30, 2024 No Comments READ MORE +

Article 29 Working Party has emphasized that the GDPR forbids “forum shopping”, which occurs when companies do what?

Article 29 Working Party has emphasized that the GDPR forbids “forum shopping”, which occurs when companies do what?A . Choose the data protection officer that is most sympathetic to their business concerns.B . Designate their main establishment in member state with the most flexible practices.C . File appeals of infringement...

January 30, 2024 No Comments READ MORE +

Which of the following was the first to implement national law for data protection in 1973?

Which of the following was the first to implement national law for data protection in 1973?A . FranceB . SwedenC . GermanyD . United KingdomView AnswerAnswer: B Explanation: Reference: https://scandinavianlaw.se/pdf/47-18.pdf

January 29, 2024 No Comments READ MORE +

Under the GDPR, what is the online shop’s PRIMARY obligation while engaging in this kind of profiling?

A U.S.-based online shop uses sophisticated software to track the browsing behavior of its European customers and predict future purchases. It also shares this information with third parties. Under the GDPR, what is the online shop’s PRIMARY obligation while engaging in this kind of profiling?A . It must solicit informed...

January 29, 2024 No Comments READ MORE +

How does the GDPR now define “processing”?

How does the GDPR now define “processing”?A . Any act involving the collecting and recording of personal data.B . Any operation or set of operations performed on personal data or on sets of personal data.C . Any use or disclosure of personal data compatible with the purpose for which the...

January 29, 2024 No Comments READ MORE +

In which situation would a data controller most likely be able to justify the processing of the data of a child without parental consent?

In which situation would a data controller most likely be able to justify the processing of the data of a child without parental consent?A . When the data is to be processed for market research.B . When providing preventive or counselling services to the child.C . When providing the child...

January 29, 2024 No Comments READ MORE +