EXIN Privacy and Data Protection Foundation

Question 1

The GDPR refers to the principles of proportionality and subsidiarity. What is the meaning of subsidiarity in this context?

A. Personal data can only be processed in accordance with the purpose specification.

B. Personal data cannot be reused without explicit and informed consent.

C. Personal data must be adequate, relevant and not excessive in relation to the purposes.

D. Personal data may only be processed when there are no other means to achieve the purposes.

Correct Answer: D

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 2

The illegal collection, storage, modification, disclosure or dissemination of personal data is an offense under European law.
What kind of offense is this?

A. An offense to privacy

B. An offense to intellectual property

C. An economic offense

D. An offense related to content

Correct Answer: A

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 3

The GDPR does not define privacy as a term but uses the concept implicitly throughout the text. What is a correct definition of privacy as implicitly used throughout the GDPR?

A. The right not to be disturbed by uninvited people, nor being followed, spied on or monitored

B. The right to freedom of opinion and expression and to seeking, receiving and imparting information

C. The right to respect for one's private and family life, home and personal correspondence

D. The fundamental right to protection of personal data, regardless of how it was obtained

Correct Answer: C

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 4

How does GDPR regulate this specific case?
A woman uses the services of a gym in the city where she lives. Yet she will move to another town. So, she requests the current gym to transfer all her data, exercises, eating plans, physical evaluations, etc. to another gym in the new town.

A. The current gym should provide the data to her.

B. The current gym should send all her data directly to the new gym.

C. The gym of the new town should get in contact with the gym and request the data.

D. The current gym is not obliged to answer the holder request, because this could jeopardize the secret of its business.

Correct Answer: B

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 5

Which of the options below best represents data protection by design?

A. It aims to incorporate security measures to protect data from the moment it is collected, throughout the processing and until its destruction at the end of the process

B. It aims to create privacy impact analysis procedures (DPIA), notifications of breaches of privacy and fulfil requests from data subjects.

C. It aims to ensure that personal data is automatically part of a protection process.

Correct Answer: A

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 6

When personal data are processed, who is ultimately responsible for demonstrating compliance with the GDPR?

A. Supervisory authority

B. Controller
Section: (none)
Explanation

C. Processor

D. Data protection officer (DPO)

Correct Answer: B

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 7

What is the main difference between Directive 95/46 / EC and the General Data Protection Regulation (GDPR)?

A. Directive 95/46 / EC offers guidance for EU Member States and can create their own laws to suit the directive. The GDPR has the force of law and all EU Member States must follow it without changing it.

B. The GDPR offers guidance for EU Member States and can create their own laws to comply with the regulation. Directive 95/46 / EC has the force of law and all EU Member States must follow it without changing.

Correct Answer: A

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 8

Which of these should appear in a Data Protection Impact Assessment (DPIA) according to the General Data Protection Regulation (GDPR)?

A. An assessment of the need and proportionality of treatment operations in relation to the objectives.

B. An inventory and the flow of personal data within the organization.

C. Data Protection Officer (DPO) contact and responsibilities.

D. A survey of other laws that must be taken into account in addition to the GDPR.

Correct Answer: A

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

EXIN Privacy and Data Protection Foundation - PDPF Exam Practice Test

Latest Update

Useful Links

Contact Us