Question 1

GDPR quotes in one of its principles that personal data should be adequate, relevant and limited to what is necessary in relation to its purpose. What principle is this?

Options :

A : integrity and confidentiality

B : purpose limitation

C : data minimization

D : lawfulness, loyalty and transparency

Answer: C

Question 2

A personal data breach has occurred, and the controller is writing a draft notification for the supervisory authority. The following information is already in the notification: - The nature of the personal data breach and its possible consequences. - Information regarding the parties that can provide additional information about the data breach. What other information must the controller provide?

Options :

A : Information of local and national authorities that were informed about the data breach

B : Name and contact details of the data subjects whose data may have been breached

C : Suggested measures to mitigate the adverse consequences of the data breach

D : The information needed to access the personal data that have been breached

Answer: C

Question 3

The GDPR contains several items. Which of these contains mandatory requirements?

Options :

A : Recitals

B : Articles

Answer: B

Question 4

A shopkeeper wants to register how many visitors enter his shop every day. A system detects the MAC-address of each visitor’s smartphone. It is impossible for the shopkeeper to identify the owner of the phone from this signal, but telephone providers can link the MAC-address to the owner of the phone. According to the GDPR, is the shopkeeper allowed to use this method?

Options :

A : Yes, because the shopkeeper cannot identify the owner of the telephone

B : No, because the telephone providers are the owners of the MAC-addresses

C : No, because the telephone’s MAC-address must be regarded as personal data

D : Yes, because the visitor has automatically consented by connecting to the Wi-Fi

Answer: C

Question 5

What is called the adequacy decision that allows data transfer between the United States and the European Economic Area (EEA)?

Options :

A : Regulation for transfer of personal data between EEA and USA/

B : Privacy Shield

C : General Data Protection Law (GDPL)

D : General Data Protection Regulation (GDPR)

Answer: B

Free PDPF Mock Exam – Practice Online Confidently

Buying Options: