Olenusic CIPP/E Exam with Correct Answers
Save
Terms in this set (188)
An organization conducts The practice does not involve completion by
body temperature checks automated means.
as a part of COVID-19
monitoring. Body
temperature is measured
manually and is not
followed by registration,
documentation or other
processing of an
individual's personal data.
Which of the following
best explains why this
practice would NOT be
subject to the GDPR?
Under the GDPR, where The data subject already has information regarding
personal data is not how his data will be used
obtained directly from the
data subject, a controller
is exempt from directly
providing information
about processing to the
data subject if?
,What should a controller Refrain from processing personal data relating to the
do after a data subject data subject for the relevant type of communication.
opts out of a direct
marketing activity?
A well-known video If obtaining consent is deemed voluntary by local
production company, legislation
based in Spain but
specializing in
documentaries filmed
worldwide, has just
finished recording several
hours of footage featuring
senior citizens in the
streets of Madrid. Under
what condition would the
company NOT be
required to obtain the
consent of everyone
whose image they use for
their documentary?
When is data sharing When personal data is being shared between
agreement MOST likely to commercial organizations acting as joint data
be needed? controllers.
How is the retention of The GDPR allows the retention of such data for the
communications traffic prevention, investigation, detection or prosecution of
data for law enforcement criminal offences only.
purposes addressed by
European data protection
law?
, As a result of the Inextricably linked in their businesses.
European Court of
Justice's ruling in the case
of Google v. Spain, search
engines outside the EEA
are also likely to be
subject to the Regulation's
right to be forgotten. This
holds true if the activities
of an EU subsidiary and its
U.S. parent are what?
What is true if an The employer must supply any information held about
employee makes an an employee unless an exemption applies.
access request to his
employer for any personal
data held about him?
What permissions are A prior opt-in consent for consumers unless they are
required for a marketer to already customers.
send an email marketing
message to a consumer in
the EU?
The core activities of the controller or processor
Which of the following
consist of processing operations that require
would require designating
systematic monitoring of data subjects on a large
a data protection officer?
scale
Which GDPR principle The legal obligation of the employer.
would a Spanish employer
most likely depend upon
to annually send the
personal data of its
employees to the national
tax authority?
Save
Terms in this set (188)
An organization conducts The practice does not involve completion by
body temperature checks automated means.
as a part of COVID-19
monitoring. Body
temperature is measured
manually and is not
followed by registration,
documentation or other
processing of an
individual's personal data.
Which of the following
best explains why this
practice would NOT be
subject to the GDPR?
Under the GDPR, where The data subject already has information regarding
personal data is not how his data will be used
obtained directly from the
data subject, a controller
is exempt from directly
providing information
about processing to the
data subject if?
,What should a controller Refrain from processing personal data relating to the
do after a data subject data subject for the relevant type of communication.
opts out of a direct
marketing activity?
A well-known video If obtaining consent is deemed voluntary by local
production company, legislation
based in Spain but
specializing in
documentaries filmed
worldwide, has just
finished recording several
hours of footage featuring
senior citizens in the
streets of Madrid. Under
what condition would the
company NOT be
required to obtain the
consent of everyone
whose image they use for
their documentary?
When is data sharing When personal data is being shared between
agreement MOST likely to commercial organizations acting as joint data
be needed? controllers.
How is the retention of The GDPR allows the retention of such data for the
communications traffic prevention, investigation, detection or prosecution of
data for law enforcement criminal offences only.
purposes addressed by
European data protection
law?
, As a result of the Inextricably linked in their businesses.
European Court of
Justice's ruling in the case
of Google v. Spain, search
engines outside the EEA
are also likely to be
subject to the Regulation's
right to be forgotten. This
holds true if the activities
of an EU subsidiary and its
U.S. parent are what?
What is true if an The employer must supply any information held about
employee makes an an employee unless an exemption applies.
access request to his
employer for any personal
data held about him?
What permissions are A prior opt-in consent for consumers unless they are
required for a marketer to already customers.
send an email marketing
message to a consumer in
the EU?
The core activities of the controller or processor
Which of the following
consist of processing operations that require
would require designating
systematic monitoring of data subjects on a large
a data protection officer?
scale
Which GDPR principle The legal obligation of the employer.
would a Spanish employer
most likely depend upon
to annually send the
personal data of its
employees to the national
tax authority?
