PDPF Exam Dumps - Privacy and Data Protection Foundation

Go to page:

Question # 17

Which data subject right is explicitly defined by the GDPR?

A copy of personal data must be provided in the format requested by the data subject.

Personal data must always be erased if the data subject requests this.

Access to personal data must be provided free of charge for the data subject.

Personal data must always be changed at the request of the data subject.

Full Access

Question # 18

In the contract between the controller and processor for the processing of personal data, which of the options below represents the sole responsibility of the Controller?

Erase all personal data after the completion of treatment-related services, deleting existing copies.

Treat personal data only through documented instructions, including with regard to data transfers to third countries or international organizations.

Ensure that the persons authorized to process personal data have made a commitment to confidentiality.

Apply technical and organizational measures to ensure that only personal data that are necessary for each specific purpose of processing are processed.

Full Access

Question # 19

According to the GDPR, for which situations should a Data Protection Impact Assessment (DPIA) be conducted?

For all projects that include technologies or processes that require data protection

For all sets of similar processing operations with comparable risks

For any situation where technologies and processes will be subject to a risk assessment

For technologies and processes that are likely to result in a high risk to the rights of data subjects

Full Access

Question # 20

What is the most important difference between the 95/46/EC and the GDPR?

95/46/EC applies as law in all EEA member states while the GDPR is a guidance.

95/46/EC applies to processing of data on EEA residents worldwide and the GDPR does not.

The GDPR applies as law in all EEA member states while 95/46/EC is a guidance.

The GDPR applies to persons and organizations which process personal data within EEA member states.

The scope of 95/46/EC is more restricted in this aspect.

Full Access

Question # 21

What is the definition of privacy related to the General Data protection Regulation (GDPR)?

A situation in which one is not observed or distributed by the government or uninvited people.

The right to respect for a personâ€™s private and family life, his home and his correspondence.

The fundamental right to respect a personâ€™s physical and mental integrity.

The right to be protected against unsolicited intrusion into a computer or network and the processing of personal data by third parties.

Full Access

Question # 22

The controller responsible for the UK Child Sexual Abuse Investigation body reported a data breach to the

supervisory authority in the UK on 28 February 2019.

People who had registered their interest in participating in forums and debates for victims of child sexual abuse received an email that contained the email addresses of everyone else who had also registered.

Which category does this data breach fit into?

This data breach should only be reported to the Data Protection Authority.

This data breach should only be reported to data subjects.

It is not necessary to notify the Supervisory Authority, as this data breach presents minimal risks to the holders.

This data breach must be reported to the Data Protection Authority and the data subjects.

Full Access