Question 1

Personal data as defined in the GDPR can be divided into several types. One of these types is described: Data that directly or indirectly reveal someone’s racial or ethnic background, political, philosophical, religious views, union affiliation and data related to health or sex life and sexual orientation. What type of personal data is this?

Options :

A : Direct personal data

B : Indirect personal data

C : Pseudonymized data

D : Special category personal data

Answer: D

Question 2

Who is responsible for demonstrating the compliance of personal data processing with the General Data Protection Regulation (GDPR)?

Options :

A : The Data Protection Officer (DPO)

B : The processor

C : The controller

D : The supervisory authority

Answer: C

Question 3

The GDPR contains several items. Which of these contains mandatory requirements?

Options :

A : Recitals

B : Articles

Answer: B

Question 4

What is called the adequacy decision that allows data transfer between the United States and the European Economic Area (EEA)?

Options :

A : Regulation for transfer of personal data between EEA and USA/

B : Privacy Shield

C : General Data Protection Law (GDPL)

D : General Data Protection Regulation (GDPR)

Answer: B

Question 5

GDPR quotes in one of its principles that personal data should be adequate, relevant and limited to what is necessary in relation to its purpose. What principle is this?

Options :

A : integrity and confidentiality

B : purpose limitation

C : data minimization

D : lawfulness, loyalty and transparency

Answer: C