Under the GDPR, which essential pieces of information must be provided to data subjects before collecting their personal data?

• A.The authority by which the controller is collecting the data and the third parties to whom the data will be sent.
• B.The name/s of relevant government agencies involved and the steps needed for revising the data.
• C.The identity and contact details of the controller and the reasons the data is being collected.
• D.The contact information of the controller and a description of the retention policy.

Comment: *

Name: *

Email: *

Verification: *

SCENARIO
Please use the following to answer the next question:
ABC Hotel Chain and XYZ Travel Agency are U.S.-based multinational companies. They use an internet-based common platform for collecting and sharing their customer data with each other, in order to integrate their marketing efforts. Additionally, they agree on the data to be stored, how reservations will be booked and confirmed, and who has access to the stored data.
Mike, an EU resident, has booked travel itineraries in the past through XYZ Travel Agency to stay at ABC Hotel Chain's locations. XYZ Travel Agency offers a rewards program that allows customers to sign up to accumulate points that can later be redeemed for free travel. Mike has signed the agreement to be a rewards program member.
Now Mike wants to know what personal information the company holds about him. He sends an email requesting access to his data, in order to exercise what he believes are his data subject rights.
What is the time period in which Mike should receive a response to his request?

• A.Not more than two months after verifying Mike's identity.
• B.When all the information about Mike has been collected.
• C.Not more than thirty days after submission of Mike's request.
• D.Not more than one month of receipt of Mike's request.

Comment: *

Name: *

Email: *

Verification: *

A mobile device application that uses cookies will be subject to the consent requirement of which of the following?

• A.The ePrivacy Directive
• B.The E-Commerce Directive
• C.The Data Retention Directive
• D.The EU Cybersecurity Directive

Comment: *

Name: *

Email: *

Verification: *

Please use the following to answer the next question:
ProStorage is a multinational cloud storage provider headquartered in the Netherlands. Its CEO. Ruth Brown, has developed a two-pronged strategy for growth: 1) expand ProStorage s global customer base and 2) increase ProStorage's sales force by efficiently onboarding effective teams. Enacting this strategy has recently been complicated by Ruth's health condition, which has limited her working hours, as well as her ability to travel to meet potential customers. ProStorage's Human Resources department and Ruth's Chief of Staff now work together to manage her schedule and ensure that she is able to make all her medical appointments The latter has become especially crucial after Ruth's last trip to India, where she suffered a medical emergency and was hospitalized m New Delhi Unable to reach Ruths family, the hospital reached out to ProStorage and was able to connect with her Chief of Staff, who in coordination with Mary, the head of HR. provided information to the doctors based on accommodate on requests Ruth made when she started a: ProStorage Why was Jackie correct in not completing a transfer impact assessment for HRYourWay?

• A.ProStorage can rely on its Binding Corporate Rules
• B.ProStorage will obtain consent for all transfers.
• C.HRYourWay was ultimately not selected
• D.HRYourWay is not located in a third country.

Comment: *

Name: *

Email: *

Verification: *

Which sentence best describes proper compliance for an international organization using Binding Corporate Rules (BCRs) as a controller or processor?

• A.All employees must follow the privacy regulations of the jurisdictions where the current scope of their work is established.
• B.Employees must sign an ad hoc contractual agreement each time personal data is exported.
• C.Employees who control personal data must complete a rigorous certification procedure, as they are exempt from legal enforcement.
• D.All employees are subject to the rules in their entirety, regardless of where the work is taking place.

Comment: *

Name: *

Email: *

Verification: *