CIPP-E Quick Study questions with correct answers 2023/2024

CIPP-E Quick StudyWhat are the 6 lawful bases for processing data under GDPR? 1. Consent 2. Contractual necessity 3. legal obligation 4. vital interests 5. public task 6. legitimate interest What are the 3 information provision obligations? 1. transparency principle 2. privacy notices 3. layered notices Brainpower Read More What are the requirements of a Non-EU Established entity with regard to the GDPR? They are only subject to the GDPR when they engage in activities involving EU residents as per the specified conditions What are the requirements of an EU-Established entity with regard to GDPR? Entities established in the EU must comply with the GDPR for all their data processing activities, regardless of where the processing takes place. This means an EU-based company processing data outside the EU still needs to comply with the GDPR. What falls out of the material scope of GDPR regarding the processing of personal data? It does not cover the processing of data: - by an individual for purely personal or household activities - for law enforcement purposes - by the EU institutions, bodies, offices, and agencies - in the course of an activity which falls outside the scope of EU law What is the material scope of GDPR? The regulation applies to the processing of personal data wholly or partly by automated means and to the processing other than by automated means of personal data which form part of a filing system or are intended to form part of a filing system. What is the territorial scope of the GDPR? Territorial scope of the GDPR includes: - Organizations Established in the EU (e.g. companies with an office, branch, or subsidiary in the EU) - Organizations not in the EU IF they 1. offer goods and services to individuals of the EU OR 2. Monitor the behavior of individuals in the EU What was the purpose of the Council of Europe Convention 108? This was the first binding international instrument protecting individuals' privacy and personal data processed automatically. What was the impact on data protection of Convention 108? It set the fundamental principles for data protection and privacy, influencing subsequent EU legislation.