Free EXIN PDPF Exam Dumps Questions & Answers

The Traffic Department of a city wants to know how many cars travel daily in order to plan the number of spaces needed to implement a rotating parking system.
To do this, cameras were installed at strategic points. Through image recognition software it is possible to capture the license plate and know how many cars traveled in the city. A monthly report is issued with the average number of cars present each day.
Signs and posters were spread around the city informing drivers and citizens what is the purpose of processing and that the data will be stored for up to five years, for future comparison.
What basic principle of legitimate processing of personal data is being violated in this case?

• A.  Personal data must be processed transparently in relation to the data subject.
• B.  Personal data must be collected for specific, explicit and legitimate purposes and must not be further processed for incompatible purposes.
• C.  Personal data must be kept in a way that allows the identification of data subjects for a period not longer than necessary.
• D.  Personal data must be processed in a way that guarantees the appropriate security of personal data.

How are the terms privacy and data protection related?

• A.  Data protection is the right to privacy.
• B.  Privacy includes the right to the protection of personal data.
• C.  The terms are synonymous.

The Control Authority may impose fines on organizations that are not meeting the mandatory requirements of the General Data Protection Regulation (GDPR).

• A.  False
• B.  True

What is the most important difference between the 95/46/EC and the GDPR?

• A.  The GDPR applies to persons and organizations which process personal data within EEA member states.
  The scope of 95/46/EC is more restricted in this aspect.
  Section: (none)
  Explanation
• B.  95/46/EC applies to processing of data on EEA residents worldwide and the GDPR does not.
• C.  The GDPR applies as law in all EEA member states while 95/46/EC is a guidance.
• D.  95/46/EC applies as law in all EEA member states while the GDPR is a guidance.

Who should ask for an opinion after conducting an impact assessment on the protection of personal data (DPIA)?

• A.  Processor
• B.  DPO
• C.  Controller
• D.  Supervisory Authority