File Info
| Exam | EXIN Privacy and Data Protection Foundation |
| Number | PDPF |
| File Name | Exin.PDPF.TestKing.2019-10-23.24q.tqb |
| Size | 87 KB |
| Posted | Oct 23, 2019 |
| Download | Exin.PDPF.TestKing.2019-10-23.24q.tqb |
How to open VCEX & EXAM Files?
Files with VCEX & EXAM extensions can be opened by ProfExam Simulator.
Coupon: MASTEREXAM
With discount: 20%
Demo Questions
Question 1
A German company wants to enter into a binding contract with a processor in the Netherlands for the processing of sensitive personal data of German data subjects. The Dutch Supervisory Authority is informed of the type of data and the aims of the processing, including the contract describing what data will be processed and what data protection procedures and practices will be in place.
According to the GDPR, what should the Dutch Supervisory Authority do in this scenario?
- Report the data processing to the German Supervisory Authority and leave the supervising to them.
- Supervise the processing of personal data in accordance with Dutch Law.
- Supervise the processing of personal data in accordance with German Law.
- The Dutch Supervisory Authority should check that adequate binding contracts are in place. The German Supervisory Authority should supervise.
Correct answer: D
Question 2
For processing of personal data to be legal, a number of requirements must be fulfilled.
What is a requirement for lawful personal data processing?
- A ‘code of conduct’, describing what the processing exactly entails, must be in place.
- The data subject must have given consent, prior to the processing to begin.
- The processing must be reported to and allowed by the Data Processing Authority
- There must be a legitimate ground for the processing of personal data.
Correct answer: D
Question 3
Important technical requirements set out in the General Data Protection Regulation (GDPR) are about data quality. One is the obligation to ensure appropriate security, including protection against unauthorized or unlawful processing.
What is another important technical requirement?
- To ascertain that personal data collection is adequate, relevant and limited to what is necessary in relation to the purposes
- To control that data collected for specified, explicit and legitimate purposes is not further processed for other purposes
- To keep personal data accurate and up to date, ensuring that inaccurate data are erased or rectified without delay
- To make sure that personal data is processed lawfully, fairly and in transparent manner in relation to the data subject
Correct answer: A
Explanation:
Reference: http://www.privacy-regulation.eu/en/article-5-principles-relating-to-processing-of-personal-data-GDPR.htm Reference: http://www.privacy-regulation.eu/en/article-5-principles-relating-to-processing-of-personal-data-GDPR.htm
