A.The group of undertakings must obtain approval from a supervisory authority.

B.The group of undertakings must be comprised of organizations of similar sizes and functions.

C.The data protection officer must be located in the country where the data controller has its main establishment.

D.The data protection officer must be easily accessible from each establishment where the undertakings are located.

A.Ensure that safeguards are in place to prevent unauthorized access to the footage.

B.Perform a data protection impact assessment (DPIA).

C.Create an information retention policy for those who operate the system.

D.Notify the appropriate data protection authority.

A.The definition of a central contact point for data subjects.

B.The rules to provide information to data subjects in Articles 13 and 14.

C.The non-disclosure of the essence of their arrangement to data subjects

D.The rules regarding the exercising of data subjects" rights.

A.The Insurance Commissioner determined that an adequacy determination is required by the Data Protection Act.

B.The UK is now a third country because it's no longer subject to the GDPR.

C.The UK is less trustworthy now that its not part of the Union.

D.Adequacy determinations automatically lapse when a Member State leaves the EU.

A.The obligation of companies to declare data breaches.

B.The necessity of the bulk collection of personal data by the government.

C.The requirement to demonstrate compliance to a supervisory authority.