How is the GDPR's position on consent MOST likely to affect future app design and implementation?

• A.Users will be given granular types of consent for particular types of processing.
• B.App developers will expand the amount of data necessary to collect for an app's functionality.
• C.Users will see fewer advertisements when using apps.
• D.App developers' responsibilities as data controllers will increase.

Comment: *

Name: *

Email: *

Verification: *

What must be included in a written agreement between the controller and processor in relation to processing conducted on the controller's behalf?

• A.An obligation on both parties to report any serious personal data breach to the supervisory authority.
• B.An obligation on both parties to agree to a termination of the agreement if the other party is responsible for a personal data breach.
• C.An obligation on the processor to assist the controller in complying with the controller's obligations to notify the supervisory authority about personal data breaches.
• D.An obligation on the processor to report any personal data breach to the controller within 72 hours.

Comment: *

Name: *

Email: *

Verification: *

Under Article 58 of the GDPR, which of the following describes a power of supervisory authorities in European Union (EU) member states?

• A.The right to access data for investigative purposes.
• B.The discretion to carry out goals of elected officials within the member state.
• C.The ability to enact new laws by executive order.
• D.The authority to select penalties when a controller is found guilty in a court of law.

Comment: *

Name: *

Email: *

Verification: *

Article 9 of the GDPR lists exceptions to the general prohibition against processing biometric dat a. Which of the following is NOT one of these exceptions?

• A.The processing is done by a non-profit organization and the results are disclosed outside the organization.
• B.The processing is necessary to protect the vital interests of the data subject when he or she is incapable of giving consent.
• C.The processing is necessary for the establishment, exercise or defense of legal claims when courts are acting in a judicial capacity.
• D.The processing is explicitly consented to by the data subject and he or she is allowed by Union or Member State law to lift the prohibition.

Comment: *

Name: *

Email: *

Verification: *

Which of the following would require designating a data protection officer?

• A.Processing is carried out by an organization employing 250 persons or more.
• B.Processing is carried out for the purpose of providing for-profit goods or services to individuals in the EU.
• C.The core activities of the controller or processor consist of processing operations of financial information or information relating to children.
• D.The core activities of the controller or processor consist of processing operations that require systematic monitoring of data subjects on a large scale.

Comment: *

Name: *

Email: *

Verification: *