Question 1

Who is responsible for demonstrating the compliance of personal data processing with the General Data Protection Regulation (GDPR)?

Options :

A : The Data Protection Officer (DPO)

B : The processor

C : The controller

D : The supervisory authority

Answer: C

Question 2

Which data subject right is explicitly defined by the GDPR?

Options :

A : A copy of personal data must be provided in the format requested by the data subject.

B : Personal data must always be erased if the data subject requests this

C : Access to personal data must be provided free of charge for the data subject

D : Personal data must always be changed at the request of the data subject

Answer: C

Question 3

A controller wants to outsource processing of personal data to a processor. What must be done before outsourcing?

Options :

A : The processor must show the controller that all demands agreed in the service level agreement (SLA) aremet.

B : The controller and processor must draft and sign a written contract guaranteeing the confidentiality of thedata

C : The controller must ask the supervisory authority for permission to outsource the processing of the data.

D : The controller must ask the supervisory authority if the agreed written contract is compliant with theregulations

Answer: B

Question 4

A personal data breach has occurred, and the controller is writing a draft notification for the supervisory authority. The following information is already in the notification: - The nature of the personal data breach and its possible consequences. - Information regarding the parties that can provide additional information about the data breach. What other information must the controller provide?

Options :

A : Information of local and national authorities that were informed about the data breach

B : Name and contact details of the data subjects whose data may have been breached

C : Suggested measures to mitigate the adverse consequences of the data breach

D : The information needed to access the personal data that have been breached

Answer: C

Question 5

What is the role of the one assigned the responsibility to govern the purposes and means of processing personal data within an organization, according to the GDPR?

Options :

A : Controller

B : Data Protection Officer

C : Data Subject

D : Processor

Answer: A

Confidently Practice Online with Free PDPF Exam Cram

Buying Options: