Under the GDPR, which essential pieces of information must be provided to data subjects before collecting their personal data?

• A.The authority by which the controller is collecting the data and the third parties to whom the data will be sent.
• B.The name/s of relevant government agencies involved and the steps needed for revising the data.
• C.The identity and contact details of the controller and the reasons the data is being collected.
• D.The contact information of the controller and a description of the retention policy.

Comment: *

Name: *

Email: *

Verification: *

When collecting personal data in a European Union (EU) member state, what must a company do if it collects personal data from a source other than the data subjects themselves?

• A.Update the data within a reasonable timeframe
• B.Inform the subjects about the collection
• C.Upgrade security to match that of the source
• D.Provide a public notice regarding the data

Comment: *

Name: *

Email: *

Verification: *

SCENARIO
Please use the following to answer the next question:
ProStorage is a multinational cloud storage provider headquartered in the Netherlands. Its CEO. Ruth Brown, has developed a two-pronged strategy for growth: 1) expand ProStorage s global customer base and 2) increase ProStorage's sales force by efficiently onboarding effective teams. Enacting this strategy has recently been complicated by Ruth's health condition, which has limited her working hours, as well as her ability to travel to meet potential customers. ProStorage's Human Resources department and Ruth's Chief of Staff now work together to manage her schedule and ensure that she is able to make all her medical appointments The latter has become especially crucial after Ruth's last trip to India, where she suffered a medical emergency and was hospitalized m New Delhi Unable to reach Ruths family, the hospital reached out to ProStorage and was able to connect with her Chief of Staff, who in coordination with Mary, the head of HR. provided information to the doctors based on accommodate on requests Ruth made when she started a: ProStorage Why is the additional measure recommended by Jackie sufficient foe using UpFinance?

• A.UpFinance is an established 7-year-old business.
• B.UpFinance is in a highly regulated financial industry
• C.UpFinance is based in a country without surveillance laws.
• D.UpFinance implements sufficient data protection measures

Comment: *

Name: *

Email: *

Verification: *

Article 29 Working Party has emphasized that the GDPR forbids "forum shopping", which occurs when companies do what?

• A.Choose the data protection officer that is most sympathetic to their business concerns.
• B.Designate their main establishment in member state with the most flexible practices.
• C.File appeals of infringement judgments with more than one EU institution simultaneously.
• D.Select third-party processors on the basis of cost rather than quality of privacy protection.

Comment: *

Name: *

Email: *

Verification: *

If two controllers act as joint controllers pursuant to Article 26 of the GDPR, which of the following may NOT be validly determined by said controllers?

• A.The definition of a central contact point for data subjects.
• B.The rules to provide information to data subjects in Articles 13 and 14.
• C.The rules regarding the exercising of data subjects" rights.
• D.The non-disclosure of the essence of their arrangement to data subjects

Comment: *

Name: *

Email: *

Verification: *