CIPP/E Exam verified to pass 2023/2024

CIPP/E Exam European Court of Human Rights (ECHR) - correct answers Sits in Strasbourg, France and upholds privacy and data protection laws through its enforcement of the European Convention on Human Rights and Convention 108. It is not part of the European Union. The ECHR has also considered the question of the protection of personal data from the viewpoint of the right of access to such data. e-Privacy Directive aka Cookie Directive (2002, amend. 2009) - correct answers The EU Directive on Privacy and Electronic Communications (e-Privacy Directive or Cookie Directive) is legally binding on EU member states and requires local implementation. Generally, the e-Privacy Directive applies to processing of personal data through public electronic communications services and networks in the EU. Among other provisions, the ePrivacy Directive requires websites to obtain consumer consent before placing cookies and other tracking technologies for marketing purposes. Treaty of Lisbon (2009) - correct answers Its aim is to strengthen and improve the core structures of the EU and to help it function more efficiently. It gave the Charter of Fundamental Rights of the EU full legal effect in the EU. It amends the EU's two core treaties, the Treaty on European Union and the Treaty Establishing the European Community. The treaty ensures that all institutions of the EU must protect individuals when processing personal data. It also established a European Data Protection Supervisor whose role is to regulate compliance with data protection law within the institutions of the EU, but its references to "authorities" implies that the national data protection authorities may also have jurisdiction in such matters. General Data Protection Regulation (GDPR) - correct answers Became law in 2016. It replaced the Data Protection Directive and became enforceable on 25 May 2018. The aim of the GDPR is to provide one set of data protection rules for all EU member states and the European Economic Area (EEA). The document comprises 173 recitals and 99 articles. Convention 108+ - correct answers In October 2018, Convention 108+, a version of Convention 108 overhauled to align with the GDPR, was signed by 20 states of the Council of Europe, including the UK. Since then, more states have followed. According to the European Commission, it serves as a means for third countries (those outside the EU) to adopt the basic tenets of the GDPR. Council of Europe - correct answers The Council of Europe is an international organization, while the European Union is an economic and political union. The Council of Europe, launched in 1949, is a human rights organization with 47 member countries, including the 28 member states of the European Union. The members have all signed the European Convention on Human rights and are subject to the European Court of Human Rights. The Council's Convention 108 was the first legally binding international agreement to protect the human right of privacy and data protection. European Economic Area (EEA) - correct answers The EEA is based on the Agreement of the European Economic Area of 1994. This Agreement allows members of the European Free Trade Association (EFTA) to participate fully in the EU's internal market. The EEA is composed of 27 EU member states and 3 EFTA member states that are not currently EU member states—Iceland, Liechtenstein and Norway. European Union (EU) - correct answers The European Union replaced the EEC, which was created by the Treaty of Rome and first promoted a single economic market across Europe. The EU currently comprises 27 member states. European Parliament (1/2 of legislative body of EU) - correct answers The only EU institution whose members are directly elected by citizens of individual member states, Parliament has four responsibilities—1) legislative development, 2) supervisory oversight of other institutions, 3) democratic representation, and 4) budget development. It has the greatest impact on data protection and privacy issues through its role in the legislative process of the EU. The Parliament has frequently been a vocal advocate of the right to data protection, often taking a more protective stance on privacy than other institutions. European Council - correct answers The European Council is the collection of heads of states of EU member states, the European Council President, the European Commission President, and the High