Question 1

A UK public body has a security breach, in which the details of a hundred thousand members of the public are published What is the MAXIMUM fine that they could receive for this breach?

Options :

A : £17 5 million or 4% of gross annual turnover

B : £10 million or 4% of gross annual turnover

C : £20 million or 2% of gross annual turnover

D : £8.7 million or 2% of gross annual turnover

Answer: A

Question 2

What factors should be considered when looking at security of processing under Article 32 of the GDPR? Select the INCORRECT answer

Options :

A : Lawfulness of processing

B : The most secure option available

C : The likelihood of a risk to the rights of the data subjects

D : Adherence to an approved code of conduct

Answer: A

Question 3

Which of the following statements are CORRECT about records of processing'?

A It must contain contact details for the Data Protection Officer where applicable.

B It must be submitted to the Information Commissioner's Office following every Data Protection

ImpactAssessment

C It is mandatory for all data processors

D The controller or the processor a mustmakesthe record available to the supervisory authority on request

E. It must contain contact details for the supervisory authority

Options :

A : B, C. and D

B : A,C,andE

C : A. C,D, and E

D : A, C,andD

Answer: D

Question 4

When does a personal data breach need to be reported to a supervisory authority?

Options :

A : All personal data breaches must be reported to a supervisory authority

B : Only where a disclosure is of special category data

C : Where the personal data breach is likely to result in a risk to the rights and freedoms of natural persons.

D :

When the controller-s right of freedom of expression outweighs the data subject-s right to a private home and family life

Answer: C

Free PDP9 Mock Exam – Practice Online Confidently

Buying Options: