Free EXIN PDPF Exam Dumps Questions & Answers

For processing of personal data to be legal, a number of requirements must be fulfilled.
What is a requirement for lawful personal data processing?

• A.  The processing must be reported to and allowed by the Data Processing Authority
• B.  There must be a legitimate ground for the processing of personal data.
• C.  A 'code of conduct', describing what the processing exactly entails, must be in place.
• D.  The data subject must have given consent, prior to the processing to begin.

In the GDPR, some types of personal data are regarded as special category personal dat a. Which personal data are considered special category personal data?

• A.  An address list of members of a political party
• B.  A list of payments made using a credit card
• C.  A genealogical register of someone's ancestors

According to the GDPR, when is a data protection impact assessment (DPIA) obligatory?

• A.  When a project includes technologies or processes that use personal data
• B.  When similar processing operations with comparable risks are repeated
• C.  When processing is likely to result in a high risk to the rights of data subjects

According to Article.33 of the GDPR the controller shall without undue delay and, where feasible, not later than 72 hours after having become aware of it, notify the personal data breach to the supervisory authority. What is the maximum penalty for non-compliance with this notification obligation?

• A.  € 20.000.000 or 4% of the annual global turnover, whichever is higher
• B.  € 10.000.000 or 2% of the annual global turnover, whichever is higher
• C.  Up to € 820.000 with a minimum of € 350.000
• D.  Up to € 500.000 with a minimum of € 120.000

Who is responsible for demonstrating the compliance of personal data processing with the General Data Protection Regulation (GDPR)?

• A.  The processor
• B.  The controller
• C.  The Data Protection Officer (DPO)
• D.  The supervisory authority