Processor or controller?

What does GDPR stand for?

Government Data Purpose Rule

Government Data Protection Regulation

General Data Purpose Rule

General Data Protection Regulation

When did the GDPR come into force?

2015

2018

2017

2016

Which article explains the three processing operations?

Article 4(1)

Article 4(4)

Article 4(2)

Article 4(3)

Which of the following is NOT classed as a processing operation for data retention?

Right to be forgotten

Destruction

Review

Storage

Who has ultimate responsibility for the data?

The controller

The individual

The processor

The government

Which of the following is prohibited under GDPR?

Keeping data for statistical purposes

Keeping data for archiving purposes in the public interest

Keeping data for scientific research purposes

Keeping data in a form that permits personal identification for longer than necessary

When do individuals NOT have the right to have their data erased?

There is no legitimate interest for continuing the processing

A child's data, with parental consent, was collected through an online marketplace

There is a legal obligation to retain it

They have changed their mind and withdrawn consent

In terms of length of retention, what has case law established?

Retention should generally be for a standard period of three years

Retention should be proportionate in relation to the collection purpose

The retention period should be indefinite

Length of retention should be decided by the data subject

What should a processor normally do with data at the end of the processing period?

Destroy it

Archive it

Return it to the data subject

Return it to the controller

Which of the following is NOT a suitable principle for a data protection policy?

Record destruction requires approval

Regular audits should determine whether a record is necessary

In exceptional circumstances, the processor can use destroy records without approval

Computer systems and software should be monitored and maintained

Processor or controller?

What does GDPR stand for?

When did the GDPR come into force?

Which article explains the three processing operations?

Which of the following is NOT classed as a processing operation for data retention?

Who has ultimate responsibility for the data?

Which of the following is prohibited under GDPR?

When do individuals NOT have the right to have their data erased?

In terms of length of retention, what has case law established?

What should a processor normally do with data at the end of the processing period?

Which of the following is NOT a suitable principle for a data protection policy?

You scored

0

out of

0

Test passed. Enter your details to download your certificate. Your certificate will also be sent to you by email.

Our sites

Useful links

Using this site

Contact us

Planned system updates