Exin PDPF Quiz 8 Topic 5 Questions 36-40

Question: 1

What is the legal status of the GDPR?

AThe GDPR is functional law in all member states of the EEA. Some Articles allow for member states law to provide for more specific rules.

BThe GDPR sets out minimum conditions and requirements. Member states need to pass national laws to meet these minimum requirements.

CThe GDPR is a recommendation of the European Commission that EEA countries' law authorities improve their laws on the protection of personal data.

Show Answer

Question: 2

The General Data Protection Regulation (GDPR) is based on the principles of proportionality and subsidiarity.

What is the meaning of ''proportionality'' in this context?

APersonal data can be processed according to the use of requirements.

BPersonal data cannot be reused without explicit and informed consent.

CPersonal data can only be processed if there are no other means to achieve the purposes.

DPersonal data must be adequate, relevant and not excessive in relation to the purposes.

Show Answer

Question: 3

''The controller shall implement appropriate technical and organizational measures for ensuring that (...) only personal data which are necessary for each specific purpose of the processing are processed.''

Which term in the GDPR is defined here?

ACompliance

BData protection by default and by design

CEmbedded data protection

Show Answer

Question: 4

What does the GDPR concept of 'binding corporate rules' (BCR) imply?

AA commission decision on the safety of data transfer to a third country

BA set of rules used by a group of enterprises concerning personal data protection in international transfers

CMeasures to compensate for the lack of data protection in a third country

DRules covering data transfers between third countries

Show Answer

Question: 5

What is the main objective of the ''Lifecycle Protection'' principle?

AAll appropriate measures shall be taken to ensure that inaccurate data, taking into account the purposes for which they are processed, are erased or rectified without a delay.

BThe processing of data must take place in a manner that ensures its security, including protection against unauthorized or unlawful processing and accidental loss, destruction or damage.

CSecurity measures should be in place from the moment data are collected until they are deleted.

DData must be collected for specified, explicit and legitimate purposes and may not be further processed in a manner incompatible with those purposes.

Show Answer

Exin PDPF Quiz:8 Topic:5 Questions:36-40