Which judicial body makes decisions on actions taken by individuals wishing to enforce their rights under EU law?

• A.European Court of Human Rights
• B.European Data Protection Board
• C.Court of Justice of European Union
• D.Court of Auditors

Comment: *

Name: *

Email: *

Verification: *

SCENARIO
Please use the following to answer the next question:
Outliers Inc. is a travel service company which has lost substantial revenue over the last few years. Their new manager, Jonathan, suspects that this is partly due to the company's outdated website. After doing some research, he meets with a sales representative from the up-and-coming IT company ZenFiTech, hoping that they can design a new, cutting-edge website for Outliers Inc.'s foundering business.
During negotiations, a ZenFiTech representative describes a plan for gathering more customer information through detailed questionnaires, which could be used to tailor their preferences to specific travel destinations. Outliers Inc. can choose any number of data categories - age, income, ethnicity - that would help them best accomplish their goals. Jonathan loves this idea, but would also like to have some way of gauging how successful this approach is, especially since the questionnaires will require customers to provide explicit consent to having their data collected. The ZenFiTech representative suggests that they also run a program to analyze the new website's traffic, in order to get a better understanding of how customers are using it. He explains his plan to place a number of cookies on customer devices. The cookies will allow the company to collect IP addresses and other information, such as the sites from which the customers came, how much time they spend on the Outliers Inc. website, and which pages on the site they visit. All of this information will be compiled in log files, which ZenFiTech will analyze by means of a special program. Outliers Inc. would receive aggregate statistics to help them evaluate the website's effectiveness. Jonathan enthusiastically engages ZenFiTech for these services.
If Outliers Inc. decides not to report the incident to the supervisory authority, what would be their BEST defense?

• A.The incident resulted from the actions of a third-party that were beyond their control.
• B.The destruction of the stolen data makes any risk to the affected data subjects unlikely.
• C.The resulting obligation to notify data subjects would involve disproportionate effort.
• D.The sensitivity of the categories of data involved in the incident was not substantial enough.

Comment: *

Name: *

Email: *

Verification: *

What is the key difference between the European Council and the Council of the European Union?

• A.The Council of the European Union is helmed by a president.
• B.The European Council is comprised of the heads of each EU member state.
  Section: (none)
  Explanation
• C.The European Council focuses primarily on issues involving human rights.
• D.The Council of the European Union has a degree of legislative power.

Comment: *

Name: *

Email: *

Verification: *

In which of the following situations would an individual most likely to be able to withdraw her consent for processing?

• A.When she is leaving her bank and moving to another bank.
• B.When she no longer wishes to be sent marketing materials from an organization.
• C.When she disagrees with a diagnosis her doctor has recorded on her records.
• D.When she has recently changed jobs and no longer works for the same company.

Comment: *

Name: *

Email: *

Verification: *

Company X has entrusted the processing of their payroll data to Provider Y. Provider Y stores this encrypted data on its server. The IT department of Provider Y finds out that someone managed to hack into the system and take a copy of the data from its server. In this scenario, whom does Provider Y have the obligation to notify?

• A.Law enforcement
• B.The public
• C.The supervisory authority
• D.Company X

Comment: *

Name: *

Email: *

Verification: *