Which of the following entities would most likely be exempt from complying with the GDPR?

• A.A company that stores all customer data in Australia and is headquartered in a European Union (EU) member state.
• B.A Chinese company that has opened a satellite office in a European Union (EU) member state to service European customers.
• C.A North American company servicing customers in South Africa that uses a cloud storage system made by a European company.
• D.A South American company that regularly collects European customers' personal data.

Comment: *

Name: *

Email: *

Verification: *

Which sentence BEST summarizes the concepts of "fairness," "lawfulness" and "transparency", as expressly required by Article 5 of the GDPR?

• A.Fairness refers to limiting the amount of data collected from individuals; lawfulness refers to the approval of company guidelines by the state; transparency solely relates to communication of key information before collecting data.
• B.Fairness and transparency refer to the communication of key information before collecting data; lawfulness refers to compliance with government regulations.
• C.Fairness refers to the collection of data from diverse subjects; lawfulness refers to the need for legal rules to be uniform; transparency refers to giving individuals access to their data.
• D.Fairness refers to the security of personal data; lawfulness and transparency refers to the analysis of ordinances to ensure they are uniformly enforced.

Comment: *

Name: *

Email: *

Verification: *

In which case would a controller who has undertaken a DPIA most likely need to consult with a supervisory authority?

• A.Where the DPIA identifies risks that will require insurance for protecting its business interests.
• B.Where the DPIA identifies high risks to individuals' rights and freedoms that the controller can take steps to reduce.
• C.Where the DPIA identifies that the processing being proposed collects the sensitive data of EU citizens.
• D.Where the DPIA identifies that personal data needs to be transferred to other countries outside of the EEA.

Comment: *

Name: *

Email: *

Verification: *

Which change was introduced by the 2009 amendments to the e-Privacy Directive 2002/58/EC?

• A.A voluntary notification for personal data breaches applicable to electronic communication providers.
• B.A voluntary notification for personal data breaches applicable to all data controllers.
• C.A mandatory notification for personal data breaches applicable to all data controllers.
• D.A mandatory notification for personal data breaches applicable to electronic communication providers.

Comment: *

Name: *

Email: *

Verification: *

Which is the best way to view an organization's privacy framework?

• A.As a living structure that aligns to changes in the organization
• B.As a fixed structure that directs changes in the organization
• C.As an industry benchmark that can apply to many organizations
• D.As an aspirational goal that improves the organization

Comment: *

Name: *

Email: *

Verification: *