CIPP/E IAPP Practice Questions

Document Content and Description Below

CIPP/E IAPP Practice Questions Which of the following data protection milestones is a treaty among member states of the Council of Europe: -Data Retention Directive -Charter of Fundamental Rights ... -Convention 108 -e-Privacy Directive -GDPR - ANS - Convention 108 Which of the following data protection milestones applies to public electronics communications services and networks? -Data Retention Directive -Charter of Fundamental Rights -Convention 108 -e-Privacy Directive -GDPR - ANS - e-Privacy Directive The Universal Declaration of Human Rights is a product of which institution? -The United Nations -The Council of Europe -The European Union - ANS - The United Nations Which European institutions is composed of 47 member states? -The Council of Europe -The European Union -The European Economic Area - ANS - The Council of Europe Chose the characteristic that describes the European Parliament. -Is responsible for legislative development, supervisory oversight of other institutions, and development of the budget -Defines the EU priorities and sets the political direction for the EU. - ANS - Defines the EU priorities and sets the political direction for the EU Choose the characteristic that describes the European Council. -Sets the overall political agenda of the EU -Negotiates and adopts laws - ANS - Sets the overall political agenda of the EU. Choose the characteristic that describes the Council of the EU -Is sometimes described as the executive body of the EU -Is one of the main decision-making bodies of the EU - ANS - Is one of the main decision making bodies of the EU. Choose the characteristic that describes the European Commission. -Has the power to propose legislation -Is composed of a directly elected body - ANS - Has the power to propose legislation Choose the characteristic that describes the Court of Justice of the EU -Makes decisions on issues of EU law -Is based in Strasbourg - ANS - Makes decisions on issues of EU law. What is the function of the 4 step test? -Determine if data qualifies as personal data -Determine i personal data is anonymous -Determine if personal date belongs to special categories -Determine if personal data is pseudonymous. - ANS - Determine if data qualifies as personal data Which criteria are used to identify personal data? Select all that apply -natural person -an identified or identifiable -any information -relating to - or anonymous - ANS - All EXCEPT "or anonymous Select the types of personal data elements that belong to special categories under the GDPR. -Personal data revealing religious or philosophical beliefs -Data relating to personal interests and hobbies -Data concerning health -Personal data revealing political opinions -Personal data revealing financial information -Genetic data used to uniquely identify a natural person - ANS - All EXCEPT -personal interests and hobbies -financial information True or False: Personal data either belongs to special categories or does not. There is no grey area. - ANS - False True or False: Anonymising personal data is always possible. - ANS - False True or false: Pseudonymous data is protected by the GDPR. - ANS - True True or false: A data controller may be a natural person or a legal entity, while a data processor must be a legal entity. - ANS - False True or false: a contract protects a processor from being held to the same legal obligations as the controller. - ANS - False True or False: A processor may decide wehre and how to process personal data. - ANS - False True or false: When personal data is being processed, there is always a controller. - ANS - True What is data processing: -Any action involved in securing and protecting data -Any action performed upon data -Any action involved in collecting personal data -Any action that adapts or alters data. - ANS - Any action performed upon data. What are the criteria used to determine the territorial scope of the GDPR: Select all that apply. -Processing of personal data of EU subjects relating to offering goods or services or monitoring behaviour -Processing of personal data by a controller not established in the EU but in a place where member state law applies -Processing of personal data when a controller or processor is established in the EU - ANS - All. Which of the following fall under the material scope of the GDPR? Select all that apply. -processing personal data without human intervention -processing anonymous data -Processing personal data that forms part of a filing system. - ANS - All EXCEPT anonymous data Exclusions to the material scope of GDPR should be interpreted broadly. True or false? - ANS - False True or false: At least three of the legitimate processing criteria within the GDPR must ve met for personal data to be processed legally. - [Show More]

Last updated: 3 years ago

Preview 1 out of 29 pages