Free BCS PDP9 Exam Dumps Questions & Answers

Which one task are supervisory authorities NOT required to carry out under Article 57(1 )(f) of the UK GDPR? Select the CORRECT answer.

• A.  Mediate between the complainant and the entity against which the complaint has been lodged, to resolve the complaint
• B.  Investigate complaints and inform the complainant of the progress of their investigation
• C.  Co-ordinate where necessary with other supervisory authorities
• D.  Handle complaints lodged by a data subject

Where a processor engages another processor ("sub-processor") to carry out processing activities on behalf of a controller, which of the following statements is CORRECT?

• A.  The processor must receive prior written authorisation to use the sub-processor
• B.  The processor may use the sub-processor without the written authorisation of the controller if the sub-processor signs a contract which reflects the same obligations as the contract with the controller
• C.  The processor may use the sub-processor without the written authorisation of the controller if the processing is deemed to be low risk.
• D.  The processor may use the sub-processor without the written authorisation of the controller if it adheres to an approved code of conduct

Under which circumstances can the 'domestic purposes' exemption be used to justify non-compliance with the Data Protection Act 2018?
A)An individual sells make up products for commission and uses social media to promote products to friends and family B)A couple are planning their daughter's wedding and use excel to store contact details and dietary needs of the guests C)An individual employs a babysitter and stores her bank details in an encrypted document in order to make payments D)A pansh council keeps a spreadsheet to manage bookings of the village hall, it contains only contact information and time slots E)A group of students are arranging a house party and using social media to invite people that they do and do not know

• A.  A. B.C. and D
• B.  B. C. D, and E
• C.  B,and C
• D.  A,B, C, and E.

An investigation reveals that an individual is defrauding a public authority After a (suspected) tip off from a senior manager, the individual submits a Subject Access Request to the authority asking for a copy of all personal data relating to any investigations that have been carried out What would be the BEST approach?

• A.  This is criminal offence data and therefore under the provisions of the Data Protection Act 2018, there is no obligation to disclose
• B.  They do not need to disclose details of the investigation as they can rely on the crime and taxation exemption on the basis that disclosure would prejudice the investigation
• C.  While the right to inform does not apply in relation to criminal acts, they need to disclose the information as this has not yet been passed to the police.
• D.  The legal and professional privilege exemption applies to this information, and therefore the information does not need to be disclosed

In the terms of their relevance under data protection legislation, how can CCTV images recorded in a supermarket BEST be described'?

• A.  They are special category data as they identify special characteristics
• B.  They are biometric data in the terms of the definition stipulated in the GDPR.
• C.  The GDPR is only engaged where these are accompanied by text or other identifier
• D.  They are personal data as they can be used to identify living human beings