Under Article 80(1) of the GDPR, individuals can elect to be represented by not-for-profit organizations in a privacy group litigation or class action. These organizations are commonly known as?

• A.Law firm organizations.
• B.Civil society organizations.
• C.Human rights organizations.
• D.Constitutional rights organizations.

Comment: *

Name: *

Email: *

Verification: *

The European Data Protection Board (EDPB) recommends measures to supplement transfer tools, in order to ensure compliance with the European Union (EU) level of personal data protection. According to these recommendations, what additional actions should be taken when a transfer to a third country is based upon an adequacy decision?

• A.Adopt technical, contractual or organizational supplementary measures.
• B.Monitor the ongoing validity of the data transfer mechanism.
• C.Monitor changes in the law or practice of the third country that would tower the level of protection of personal data
• D.Adopt a supplementary data transfer mechanism.

Comment: *

Name: *

Email: *

Verification: *

SCENARIO
Please use the following to answer the next question:
BHealthy, a company based in Italy, is ready to launch a new line of natural products, with a focus on sunscreen. The last step prior to product launch is for BHealthy to conduct research to decide how extensively to market its new line of sunscreens across Europe. To do so, BHealthy teamed up with Natural Insight, a company specializing in determining pricing for natural products. BHealthy decided to share its existing customer information - name, location, and prior purchase history - with Natural Insight. Natural Insight intends to use this information to train its algorithm to help determine the price point at which BHealthy can sell its new sunscreens.
Prior to sharing its customer list, BHealthy conducted a review of Natural Insight's security practices and concluded that the company has sufficient security measures to protect the contact information. Additionally, BHealthy's data processing contractual terms with Natural Insight require continued implementation of technical and organization measures. Also indicated in the contract are restrictions on use of the data provided by BHealthy for any purpose beyond provision of the services, which include use of the data for continued improvement of Natural Insight's machine learning algorithms.
Under the GDPR, what are Natural Insight's security obligations with respect to the customer information it received from BHealthy?

• A.Appropriate security that takes into account the industry practices for protecting customer contact information and purchase history.
• B.Absolute security since BHealthy is sharing personal data, including purchase history, with Natural Insight.
• C.The level of security that a reasonable data subject whose data is processed would expect in relation to the data subject's purchase history.
• D.Only the security measures assessed by BHealthy prior to entering into the data processing contract.

Comment: *

Name: *

Email: *

Verification: *

What ruling did the Planet 49 CJEU judgment make regarding the issue of pre-ticked boxes?

• A.They are allowed if recorded In the register of processing activities.
• B.They are allowed if determined to be technically necessary.
• C.They constitute valid consent if the processing is necessary for purposes of legitimate interest
• D.They do not amount to valid consent under any circumstances.

Comment: *

Name: *

Email: *

Verification: *