While paying with a credit card, the card is skimmed (i.e. the data on the magnetic strip is stolen). The magnetic strip contains the account number, expiration date, cardholder's name and address, PIN number and more.
What kind of a data breach is this?

A processor is instructed to report on customers who bought a product both last month and at least once in the three months before that Unfortunately, the processor makes a mistake and uses personal data collected by another controller for a different purpose.
The mistake is found before the report is created, and nobody had access to personal date he or she should not have had access to.
How should the processor act on this situation and what should the controller do if anything?

The GDPR states that records of processing activities must be kept by the controller. To whom must the controller make these records available records available, if requested?

An architect, leaving a building site, puts his laptop for a moment beside his car on the road, while answering his phone. When driving away he sees in the mirror his laptop being crushed by an enormous lorry driving over it. All his files on the design of the building and the calculations he worked on are lost. His only consolation is that those were the only files on the device.
In terms of the GDPR, what happened?

Which of the following types of data transfer outside the European Economic Area (EEA) is allowed?