Important technical requirements set out in the General Data Protection Regulation (GDPR) are about data quality. One is the obligation to ensure appropriate security, including protection against unauthorized or unlawful processing. What is another important technical requirement? A. To ascertain…
According to the GDPR, for which situations should a Data Protection impact Assessment (DPIA) be conducted? A. For all projects that include technologies or processes that require data protection B. For all sets of similar processing operations with comparable risks…
Under what EU legislation is data transfer between the EEA and the U.S.A. allowed? A. An adequacy decision based on the Privacy Shield program B. An adequacy decision by reason of US domestic legislation C. The Transatlantic Trade an Investment…
For processing of personal data to be legal, a number of requirements must be fulfilled. What is a requirement for lawful personal data processing? A. A ‘code of conduct’, describing what the processing exactly entails, must be in place. B.…
A person finds that a private videotape showing her in a very intimate situation has been published on a website. She never consented to publication and demands that the video is being removed without undue delay. According to the GDPR,…
A German company wants to enter into a binding contract with a processor in the Netherlands for the processing of sensitive personal data of German data subjects. The Dutch Supervisory Authority is informed of the type of data and the…
In what way are online activities of people most effectively used by modern marketers? A. By analyzing the logs of the web server it can be seen which products are top sellers, allowing them to optimize their marketing campaigns for…
The Supervisory Authority is notified whenever an organization intends to process personal data, except for some specific situations. The Supervisory Authority keeps a publicly accessible register of these data processing operations. What else is a legal obligation of the Supervisory…
What is the essence of the principle ‘Full Lifecycle Protection’? A. Delivering the maximum degree of data protection by default, ensuring that personal data are automatically protected in any given IT system or business practice. B. Ensuring that whatever business…
A processor is instructed to report on customers who bought a product both last month and at least once in the three months before that. Unfortunately, the processor makes a mistake and uses personal data collected by another controller for…