Question 1

A shopkeeper wants to register how many visitors enter his shop every day. A system detects the MAC-address of each visitor’s smartphone. It is impossible for the shopkeeper to identify the owner of the phone from this signal, but telephone providers can link the MAC-address to the owner of the phone. According to the GDPR, is the shopkeeper allowed to use this method?

Options :

A : Yes, because the shopkeeper cannot identify the owner of the telephone

B : No, because the telephone providers are the owners of the MAC-addresses

C : No, because the telephone’s MAC-address must be regarded as personal data

D : Yes, because the visitor has automatically consented by connecting to the Wi-Fi

Answer: C

Question 2

A gentleman has a loan denied by the bank’s system that he has been a customer for many years. He is disgusted, because the loan would make it possible to hold the wedding of his only granddaughter. He contacts the bank and asks for explanations. He wants to know exactly why his loan was denied and based on what information. What right is required by the data subject according to the GDPR?

Options :

A : Right to limitation of treatment

B : Right to rectification

C : Data subject’s right of access

D : Right to object and automated individual decision-making

Answer: D

Question 3

GDPR quotes in one of its principles that personal data should be adequate, relevant and limited to what is necessary in relation to its purpose. What principle is this?

Options :

A : integrity and confidentiality

B : purpose limitation

C : data minimization

D : lawfulness, loyalty and transparency

Answer: C

Question 4

What is a description of data protection by design and by default?

Options :

A : Not holding more data than is strictly required for processing

B : An indication of timeframes if processing relates to erasure

C : Data may only be collected for explicit and legitimate purposes

D : An approach that implements data protection from the start (Correct)

Answer: D

Question 5

Which data subject right is explicitly defined by the GDPR?

Options :

A : A copy of personal data must be provided in the format requested by the data subject.

B : Personal data must always be erased if the data subject requests this

C : Access to personal data must be provided free of charge for the data subject

D : Personal data must always be changed at the request of the data subject

Answer: C

Confidently Practice Online with Free PDPF Exam Cram

Buying Options: