Processor or controller?

What does GDPR stand for?

Government Data Purpose Rule

General Data Purpose Rule

Government Data Protection Regulation

General Data Protection Regulation

When did the GDPR come into force?

2016

2018

2015

2017

Which article explains the three processing operations?

Article 4(1)

Article 4(3)

Article 4(4)

Article 4(2)

Which of the following is NOT classed as a processing operation for data retention?

Review

Destruction

Right to be forgotten

Storage

Who has ultimate responsibility for the data?

The individual

The controller

The government

The processor

Which of the following is prohibited under GDPR?

Keeping data for statistical purposes

Keeping data for scientific research purposes

Keeping data in a form that permits personal identification for longer than necessary

Keeping data for archiving purposes in the public interest

When do individuals NOT have the right to have their data erased?

There is a legal obligation to retain it

There is no legitimate interest for continuing the processing

A child's data, with parental consent, was collected through an online marketplace

They have changed their mind and withdrawn consent

In terms of length of retention, what has case law established?

Retention should be proportionate in relation to the collection purpose

The retention period should be indefinite

Length of retention should be decided by the data subject

Retention should generally be for a standard period of three years

What should a processor normally do with data at the end of the processing period?

Return it to the data subject

Destroy it

Return it to the controller

Archive it

Which of the following is NOT a suitable principle for a data protection policy?

Computer systems and software should be monitored and maintained

Regular audits should determine whether a record is necessary

Record destruction requires approval

In exceptional circumstances, the processor can use destroy records without approval

Processor or controller?

What does GDPR stand for?

When did the GDPR come into force?

Which article explains the three processing operations?

Which of the following is NOT classed as a processing operation for data retention?

Who has ultimate responsibility for the data?

Which of the following is prohibited under GDPR?

When do individuals NOT have the right to have their data erased?

In terms of length of retention, what has case law established?

What should a processor normally do with data at the end of the processing period?

Which of the following is NOT a suitable principle for a data protection policy?

You scored

0

out of

0

Test passed. Enter your details to download your certificate. Your certificate will also be sent to you by email.

Our sites

Useful links

Using this site

Contact us

Planned system updates