Online Access Free PDPF Practice Test

When does the GDPR require data subjects consent to a cookie?

• A.Never, as the EU Cookie Law does not require explicit consent
• B.Only if the cookie contains authentication information of the data subject
• C.Always, because a cookie is regarded as online identifier
• D.Only if the cookie contains shopping basket items

According to the GDPR, what is a description of binding corporate rules (BCR)?

• A.A set of agreements covering personal data transfers between non-EEA countries
• B.A measure to compensate for the lack of personal data protection in a third country
• C.A decision on the safety of transferring personal data to a non-EEA country
• D.A set of approved rules on personal data protection used by a group of enterprises

What does the principle of 'data minimization' mean?

• A.Personal data shall be accurate and where necessary kept up to date.
• B.Personal data shall be processed lawfully, fairly and in a transparent manner in relation to the data subject.
• C.Personal data shall be adequate and limited to what is necessary for the purposes of the processing.
• D.Personal data shall be processed in a manner that ensures appropriate security of the personal data.

What is the main purpose of the General Data Protection Regulation (GDPR)?

• A.Protect data of data subjects located in the European Economic Area (EEA), regardless of the country of processing.
• B.Protecting the data of everyone in Europe.
• C.Protect confidential business data.
• D.Protect the data of everyone in the world.

Which of these options is an example of a data breach?

• A.Loss of personal data
• B.A security incident related to corporate data.
• C.Transfer of personal data outside the EU