Exin PDPF Quiz 7 Topic 1 Questions 31-35

Question: 1

Regarding the Supervisory Authority's ''Investigative Powers'', it is correct to state:

Ait has the power to order the suspension of sending data to recipients in third countries or to international organizations

Byou have the power to order the controller to report a personal data breach to the data subject

Cit has the power to notify the controller or processor of alleged GDPR violations

Dit has the power to conduct impact assessments on data privacy

Show Answer

Question: 2

According to the General Data Protection Regulation (GDPR) which covers the concept ''Compulsory Corporate Rules''?

ADecision made by a corporation to transfer data to another country.

BContractual clauses to transfer data to a country that does not have a data protection law.

CA set of rules used by a group of companies regarding the protection of personal data in international transfers

DRules covering data transfers between several countries.

Show Answer

Question: 3

Article 33 of the GDPR deals with ''Notification of a personal data breach to the supervisory authority''.

Paragraph 3 sets out the minimum information that must be included in this notification. Which of the below is one of these?

AThe contact of the data protection officer or another point of contact where more information could be obtained.

BContact information for all data subjects.

CA copy of the breached personal data to be analyzed.
Section: (none)
Explanation

Show Answer

Question: 4

The General Data Protection Regulation (GDPR) is often known as the ''European privacy law''. What is the relationship between 'privacy' and 'data protection'?

APrivacy is a part of data protection that aims to keep personal data confidential.

BData protection is a part of privacy that aims to keep personal data confidential.

CThe two terms have the same meaning. They are synonyms.

DData protection is the necessary measures to protect an individual's privacy.

Show Answer

Question: 5

What is the essence of the principle Full Lifecycle Protection?

ADelivering the maximum degree of data protection by default, ensuring that personal data are automatically protected in any given IT system or business practice.

BEnsuring that whatever business practice or technology is involved, processing is done according to the stated objectives, subject to independent verification

CEmbedding security measures to protect the data horn the moment it is collected throughout processing until M is destroyed at the end of the process

DPrioritizing the protection of the interests of the individual by offering for example strong privacy defaults, appropriate notice or user-friendly options.

Show Answer

Exin PDPF Quiz:7 Topic:1 Questions:31-35