Online Access Free PDP9 Exam Questions

Which of the following statements MOST accurately describes the potential impact of Al on the principle of transparency?

• A.Al can lead to invisible processing, with data subjects not being aware of its presence.
• B.Transparency requirements do not apply to Al, as there is a relevant exemption
• C.Data subjects should generally expect Al to be present in processing activities
• D.Transparency requirements do not apply to Al, as it is always compatible with original purposes

What is the meaning of storage limitation in relation to UK GDPR Article 5 (1 )(e)?

• A.Storing data in a secure format only permitting access to those with a business need
• B.Limiting the number of records stored in any single repository to minimise risk surface.
• C.Only storing data in locations within the EU. except where there is an adequacy decision.
• D.Keeping identifiable personal data for no longer than is necessary for the intended processing

In which of the following circumstances does a public authority NOT need to appoint a Data Protection Officer?

• A.Where it processes a large amount of personal data
• B.Where it processes special category data
• C.Where it is defined as a public body in the Data Protection Act 2018
• D.Where it is a court acting in its judicial capacity

Where a processor engages another processor ("sub-processor") to carry out processing activities on behalf of a controller, which of the following statements is CORRECT?

• A.The processor may use the sub-processor without the written authorisation of the controller if the processing is deemed to be low risk.
• B.The processor may use the sub-processor without the written authorisation of the controller if the sub-processor signs a contract which reflects the same obligations as the contract with the controller
• C.The processor may use the sub-processor without the written authorisation of the controller if it adheres to an approved code of conduct
• D.The processor must receive prior written authorisation to use the sub-processor

What is the Employment Practices Code?

• A.A statutory framework for implementing data protection training for employees.
• B.A set of exemptions that can be used when processing data related to employees
• C.Guidance on the requirements for employing a Data Protection Officer
• D.Guidance on meeting legal requirements of data protection when employing staff