Question 1

A gentleman has a loan denied by the bank’s system that he has been a customer for many years. He is disgusted, because the loan would make it possible to hold the wedding of his only granddaughter. He contacts the bank and asks for explanations. He wants to know exactly why his loan was denied and based on what information. What right is required by the data subject according to the GDPR?

Options :

A : Right to limitation of treatment

B : Right to rectification

C : Data subject’s right of access

D : Right to object and automated individual decision-making

Answer: D

Question 2

What is the role of the one assigned the responsibility to govern the purposes and means of processing personal data within an organization, according to the GDPR?

Options :

A : Controller

B : Data Protection Officer

C : Data Subject

D : Processor

Answer: A

Question 3

GDPR quotes in one of its principles that personal data should be adequate, relevant and limited to what is necessary in relation to its purpose. What principle is this?

Options :

A : integrity and confidentiality

B : purpose limitation

C : data minimization

D : lawfulness, loyalty and transparency

Answer: C

Question 4

A controller wants to outsource processing of personal data to a processor. What must be done before outsourcing?

Options :

A : The processor must show the controller that all demands agreed in the service level agreement (SLA) aremet.

B : The controller and processor must draft and sign a written contract guaranteeing the confidentiality of thedata

C : The controller must ask the supervisory authority for permission to outsource the processing of the data.

D : The controller must ask the supervisory authority if the agreed written contract is compliant with theregulations

Answer: B

Question 5

Which data subject right is explicitly defined by the GDPR?

Options :

A : A copy of personal data must be provided in the format requested by the data subject.

B : Personal data must always be erased if the data subject requests this

C : Access to personal data must be provided free of charge for the data subject

D : Personal data must always be changed at the request of the data subject

Answer: C