According to the GDPR, when should the processing of photographs be considered processing of special categories of personal data?

• A.When processed with the intent to uniquely identify or authenticate a natural person.
• B.When processed with the intent to comply with a law.
• C.When processed with the intent to publish information regarding a natural person on publicly accessible media.
• D.When processed with the intent to proceed to scientific or historical research projects.

Comment: *

Name: *

Email: *

Verification: *

Which of the following would most likely NOT be covered by the definition of "personal data" under the GDPR?

• A.The identification number of a German candidate for a professional examination in Germany
• B.The payment card number of a Dutch citizen
• C.The unlinked aggregated data used for statistical purposes by an Italian company
• D.The U.S. social security number of an American citizen living in France

Comment: *

Name: *

Email: *

Verification: *

According to the GDPR, how is pseudonymous personal data defined?

• A.Data that can no longer be attributed to a specific data subject without the use of additional information kept separately.
• B.Data that can no longer be attributed to a specific data subject, with no possibility of re-identifying the data.
• C.Data that has been rendered anonymous in such a manner that the data subject is no longer identifiable.
• D.Data that has been encrypted or is subject to other technical safeguards.

Comment: *

Name: *

Email: *

Verification: *

A company is located in a country NOT considered by the European Union (EU) to have an adequate level of data protection. Which of the following is an obligation of the company if it imports personal data from another organization in the European Economic Area (EEA) under standard contractual clauses?

• A.Supply any information requested by a data protection authority (DPA) within 30 days.
• B.Ensure that local laws do not impede the company from meeting its contractual obligations.
• C.Ensure that notice is given to and consent is obtained from data subjects.
• D.Submit the contract to its own government authority.

Comment: *

Name: *

Email: *

Verification: *

Which marketing-related activity is least likely to be covered by the provisions of Privacy and Electronic Communications Regulations (Directive 2002/58/EC)?

• A.The use of cookies to collect data about an individual.
• B.Advertisements passively displayed on a website.
• C.A text message to individuals from a company offering concert tickets for sale.
• D.An email from a retail outlet promoting a sale to one of their previous customer.

Comment: *

Name: *

Email: *

Verification: *