CIPP/E Practice Questions and Answers| Graded A+

Which statement is correct when considering the right to privacy under article 8 of the European Convention on Human Rights? The right to privacy has to be balanced against other rights under the ECHR What is the one major goal that the OECD Guidelinges, Convention 108, and the Directive all had in common but largely failed to achieve in Europe? The restriction of cross-border data flow Which EU institution is vested with the competence to propose new data protection legislation on its own initiative? Commission Which institution has the power to adopt findings that confirm the adequacy of the data protection level in a non-EU country? European Commission What type of data lies beyond the scope of the GDPR? Anonymised What is the consequence if a processor makes an independent decision regarding the purposes and means of processing it carries out on behalf of a controller? The processor will be considered to be a controller With the issue of consent, the GDPR allows member states some choice regarding what? The age which children must be required to obtain parental consent Which sentence BEST summarizes the concepts of Fairness, lawfullness, and transparency, as expressly required by Article 5 of the GDPR? Fairness and transparency refer to the communication of key information before collecting data; lawfulness refers to compliance with government regulations Assuming that the "without undue delay" provison is followed, what is the time limit for complying with a data access request? 1 month + additional 2 months Company X has entrusted the processing of their payroll data provider to Y. Provider Y stores this encrypted data on its server. The IT department of Provider Y finds out that someone managed to hack into the system and take a copy of the data from its server. In this scenario, whom does Provider Y have the obligation to notify? Company X Which of the following would require designationg a data protection officer? The core activites of the controller or processor consist of processing operations that require