Online Access Free PDPF Exam Questions

For processing of personal data to be legal, a number of requirements must be fulfilled.
What is a requirement for lawful personal data processing?

• A.The processing must be reported to and allowed by the Data Processing Authority
• B.There must be a legitimate ground for the processing of personal data.
• C.A 'code of conduct', describing what the processing exactly entails, must be in place.
• D.The data subject must have given consent, prior to the processing to begin.

A natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal dat a. Which role in data protection is defined here?

• A.Processor
• B.Supervisory authority
• C.Third party
• D.Controller

The GDPR contains several items. Which of these contains mandatory requirements?

• A.Articles
• B.Recitals

On July 12, 2016 the European Commission implemented a ruling regarding the transfer of personal data between the EEA and the US. The ruling is based on the data protection measures described in the EU-US Privacy Shield. What kind of a ruling is this?

• A.Treaty superseding the GDPR
• B.Adequacy decision
• C.Derogation
• D.Legally binding contract

When is a Data Protection Impact Assessment (DPIA) under the General Data Protection Regulation (GDPR) mandatory?

• A.In all types of personal data processing.
• B.There is no security policy and information security risk analysis.
• C.Application of new technologies that may imply a high risk to the rights and freedoms of data subjects.