SCENARIO
Please use the following to answer the next question:
WonderkKids provides an online booking service for childcare. Wonderkids is based in France, but hosts its website through a company in Switzerland. As part of their service, WonderKids will pass all personal data provided to them to the childcare provider booked through their system. The type of personal data collected on the website includes the name of the person booking the childcare, address and contact details, as well as information about the children to be cared for including name, age, gender and health information. The privacy statement on Wonderkids' website states the following:
"WonderkKids provides the information you disclose to us through this website to your childcare provider for scheduling and health and safety reasons. We may also use your and your child's personal information for our own legitimate business purposes and we employ a third-party website hosting company located in Switzerland to store the dat a. Any data stored on equipment located in Switzerland meets the European Commission provisions for guaranteeing adequate safeguards for you and your child's personal information. We will only share you and your child's personal information with businesses that we see as adding real value to you. By providing us with any personal data, you consent to its transfer to affiliated businesses and to send you promotional offers."
"We may retain you and your child's personal information for no more than 28 days, at which point the data will be depersonalized, unless your personal information is being used for a legitimate business purpose beyond 28 days where it may be retained for up to 2 years."
"We are processing you and your child's personal information with your consent. If you choose not to provide certain information to us, you may not be able to use our services. You have the right to: request access to you and your child's personal information; rectify or erase you or your child's personal information; the right to correction or erasure of you and/or your child's personal information; object to any processing of you and your child's personal information. You also have the right to complain to the supervisory authority about our data processing activities." What additional information must Wonderkids provide in their Privacy Statement?

• A.How often promotional emails will be sent.
• B.Contact information of the hosting company.
• C.Technical and organizational measures to protect data.
• D.The categories of recipients with whom data will be shared.

Comment: *

Name: *

Email: *

Verification: *

What is the MAIN reason GDPR Article 4(22) establishes the concept of the "concerned supervisory authority"?

• A.To encourage the consistency of local data processing activity.
• B.To give corporations a choice about who their supervisory authority will be.
• C.To ensure the GDPR covers controllers that do not have an establishment in the EU but have a representative in a member state.
• D.To ensure that the interests of individuals residing outside the lead authority's jurisdiction are represented.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is NOT exempt from the material scope of the GDPR. insofar as the processing of personal data is concerned?

• A.A natural person in the course of a large-scale but purely personal or household activity.
• B.A natural person processing data foe a small-scale, purely personal or household activity.
• C.A natural person in the course of processing purely personal or household data on behalf of a spouse who is beyond the age of majority.
• D.A natural person in the course of activity conducted purely tor a personally-owned sole proprietorship.

Comment: *

Name: *

Email: *

Verification: *

It a company receives an anonymous email demanding ransom for the stolen personal data of its clients, what must the company do next, per GDPR requirements'3

• A.Notify the police and Tile a criminal complaint about the incident
• B.Start an investigation to understand the incident's possible scope, duration and nature
• C.Send a notification to the competent supervisory authority describing the incident.
• D.Send an email about the incident to all clients and ask them to change their passwords

Comment: *

Name: *

Email: *

Verification: *

What is an important difference between the European Court of Human Rights (ECHR) and the Court of Justice of the European Union (CJEU) in relation to their roles and functions?

• A.ECHR can enforce human rights laws against governments that fail to implement them, while the CJEU cannot.
• B.CJEU can hear appeals on human rights decisions made by national courts, while the ECHR cannot.
• C.ECHR can rule on issues concerning privacy as a fundamental right, while the CJEU cannot.
• D.CJEU can force national governments to implement and honor EU law, while the ECHR cannot.

Comment: *

Name: *

Email: *

Verification: *