Exin PDPF Quiz 6 Topic 4 Questions 26-30

Question: 1

A processor is instructed to report on customers who bought a product both last month and at least once in the three months before that Unfortunately, the processor makes a mistake and uses personal data collected by another controller for a different purpose.

The mistake is found before the report is created, and nobody had access to personal date he or she should not have had access to.

How should the processor act on this situation and what should the controller do if anything?

AThe processor must notify the controller and the controller most notify the Data Protection Authority of a data breach.

BThe processor must notify the controller of a data breach. The controller must assess the possible risk to the data subjects.

CThe processor must notify the Data Protection Authority of a data breach. The controller must execute a PIA to assess the risk to data subjects.

DThe processor must restart processing using the right data. There is no need for the controller to act.

Show Answer

Question: 2

The Supervisory Authority is notified whenever an organization intends to process personal data, except for some specific situations. The Supervisory Authority keeps a publicly accessible register of these data processing operations.

What else is a legal obligation of the Supervisory Authority in reaction to such a not ideation?

ATo assess compliance with the law in all cases where sensitive personal data is processed

BTo assess the legitimacy of operations that involves specific risks for the data subjects

CTo assess the legitimacy of binding contract(s) between lite controller and the data processor(s)

DTo give out a license for the data processing, specifying the types of personal data which are allowed

Show Answer

Question: 3

Someone regularly receives offers from a store where he purchased something five years ago.

He wants the company to stop sending offers and to wipe his personal data.

Which aspect of the right of a data subject in the General Data Protection Regulation (GDRP) requires the company to comply?

AThe right to erasure

BThe right to rectification

CThe tight to reduction of processing

DThe right to withdraw consent

Show Answer

Question: 4

Important technical requirements set out in the General Data Protection Regulation (GDPR) are about quality. One is the obligation to ensure appropriate security, including protection against authentication against unauthorized or unlawful processing.

What is another important technician requirement?

ATo ascertain that personal data collection is adequate, relevant and limited to what is necessary in relation to the purposes

BTo control that data collected for specified, explicit and legitimate purposes is not further processed for other purposes

CTo keep personal data accurate and up to date, ensuring, that inaccurate data are erased or rectified without delay

DTo make sure that personal data is processed lawfully, fairly and in a transparent manner in relation to the data subject

Show Answer

Question: 5

According to the GDPR, what is a mandatory topic in a report?

AA systematic description of the fiduciary duties to insure compliance to all laws relevant laws and regulations

BAn assessment of the necessity and proportionally of the processing operations in relation to the purposes

CThe documentation of the risks to the rights and freedoms of the data protection officer

DThe measures envisaged to address the privacy compliance frameworks risks

Show Answer

Exin PDPF Quiz:6 Topic:4 Questions:26-30