Appendix C - Questions and Answers
167
,Chapter 1: Data Protection Rationale and Legal
Framework
Date
1. What role did Convention 108 play in the development of the framework
directive for data protection?
□ A. It was a legal precedent for enforcing penalties on data breaches
□ B. It served as a financial model for funding data protection initiatives
□ C. It provided a common set of standards for countries ratifying it
□ D. It outlined the technological requirements for data processing
2. Why is it important for member states to avoid creating obstacles to
transborder flows of personal data?
□ A. To limit the processing of personal information
□ B. To facilitate international trade and cooperation
□ C. To ensure that privacy laws are more stringent
□ D. To enhance the security of national data systems
3. What is the primary focus of Convention 108 regarding personal data?
A. To set standards for the protection of personal data while facilitating
□ international trade
□ B. To restrict the flow of personal data across borders
□ C. To eliminate all forms of personal data processing
□ D. To promote the use of personal data for commercial purposes
4. Which chapter of Convention 108 outlines the substantive law provisions for
personal data processing?
□ A. Chapter III
□ B. Chapter II
□ C. Chapter I
□ D. Chapter IV
,5. According to Chapter II of Convention 108, personal information must be stored
for how long?
□ A. As long as necessary for the purpose it was collected
□ B. Only for a maximum of one year
□ C. Indefinitely, for future reference
□ D. Until the individual requests deletion
6. What is the primary condition under which special categories of data can be
processed automatically according to domestic law?
□ A. When individuals consent to the processing
□ B. When it is necessary for state security
□ C. When it is required for criminal investigations
□ D. When appropriate safeguards are provided by law
7. According to Article 12 of Convention 108, what is required for the transfer of
personal information between signatory countries?
□ A. Countries must have equivalent data protection laws
□ B. No special authorizations or prohibitions should be imposed
□ C. A mutual agreement on data protection standards must be established
□ D. Transfers can only occur with explicit consent from individuals
8. What does the term 'derogation' refer to in the context of data protection
provisions under Convention 108?
□ A. The complete removal of data protection laws
□ B. The requirement for countries to harmonize their laws
□ C. Exceptions allowed under specific national rules
□ D. The automatic approval of all data transfers
9. What is the primary purpose of the supervisory authority designated by parties
to Convention 108?
□ A. To enforce criminal laws
□ B. To oversee compliance with data protection law
□ C. To manage public relations
□ D. To conduct financial audits
, 10. Which country was the most recent to accede to Convention 108 as of February
2019?
□ A. Argentina
□ B. Brazil
□ C. Canada
□ D. Japan
11. What significant update was introduced with the Convention 108+ in 2018?
□ A. A focus on environmental protection
□ B. Regulations for financial transactions
□ C. Provisions for automated processing of personal data
□ D. Guidelines for international trade agreements
12. What was the primary concern that led to the proposal for a Council Directive
on data protection by the European Commission?
□ A. The diversity of national approaches to data protection legislation
□ B. The need for a unified currency across member states
□ C. The establishment of a common military policy
□ D. The promotion of free trade agreements outside the EU
13. According to the proposal for the Council Directive, what is considered an
obstacle to the completion of the internal market?
□ A. The absence of a common language among member states
□ B. The lack of technological advancements in data processing
□ C. The diversity of national approaches and lack of community-level protection
□ D. The high costs associated with implementing data protection laws
14. What significant aspect distinguishes Convention 108 from earlier guidelines on
data protection?
□ A. It is the first legally binding international instrument
□ B. It is a non-binding agreement
□ C. It focuses solely on automated data processing
□ D. It was adopted by the United Nations
167
,Chapter 1: Data Protection Rationale and Legal
Framework
Date
1. What role did Convention 108 play in the development of the framework
directive for data protection?
□ A. It was a legal precedent for enforcing penalties on data breaches
□ B. It served as a financial model for funding data protection initiatives
□ C. It provided a common set of standards for countries ratifying it
□ D. It outlined the technological requirements for data processing
2. Why is it important for member states to avoid creating obstacles to
transborder flows of personal data?
□ A. To limit the processing of personal information
□ B. To facilitate international trade and cooperation
□ C. To ensure that privacy laws are more stringent
□ D. To enhance the security of national data systems
3. What is the primary focus of Convention 108 regarding personal data?
A. To set standards for the protection of personal data while facilitating
□ international trade
□ B. To restrict the flow of personal data across borders
□ C. To eliminate all forms of personal data processing
□ D. To promote the use of personal data for commercial purposes
4. Which chapter of Convention 108 outlines the substantive law provisions for
personal data processing?
□ A. Chapter III
□ B. Chapter II
□ C. Chapter I
□ D. Chapter IV
,5. According to Chapter II of Convention 108, personal information must be stored
for how long?
□ A. As long as necessary for the purpose it was collected
□ B. Only for a maximum of one year
□ C. Indefinitely, for future reference
□ D. Until the individual requests deletion
6. What is the primary condition under which special categories of data can be
processed automatically according to domestic law?
□ A. When individuals consent to the processing
□ B. When it is necessary for state security
□ C. When it is required for criminal investigations
□ D. When appropriate safeguards are provided by law
7. According to Article 12 of Convention 108, what is required for the transfer of
personal information between signatory countries?
□ A. Countries must have equivalent data protection laws
□ B. No special authorizations or prohibitions should be imposed
□ C. A mutual agreement on data protection standards must be established
□ D. Transfers can only occur with explicit consent from individuals
8. What does the term 'derogation' refer to in the context of data protection
provisions under Convention 108?
□ A. The complete removal of data protection laws
□ B. The requirement for countries to harmonize their laws
□ C. Exceptions allowed under specific national rules
□ D. The automatic approval of all data transfers
9. What is the primary purpose of the supervisory authority designated by parties
to Convention 108?
□ A. To enforce criminal laws
□ B. To oversee compliance with data protection law
□ C. To manage public relations
□ D. To conduct financial audits
, 10. Which country was the most recent to accede to Convention 108 as of February
2019?
□ A. Argentina
□ B. Brazil
□ C. Canada
□ D. Japan
11. What significant update was introduced with the Convention 108+ in 2018?
□ A. A focus on environmental protection
□ B. Regulations for financial transactions
□ C. Provisions for automated processing of personal data
□ D. Guidelines for international trade agreements
12. What was the primary concern that led to the proposal for a Council Directive
on data protection by the European Commission?
□ A. The diversity of national approaches to data protection legislation
□ B. The need for a unified currency across member states
□ C. The establishment of a common military policy
□ D. The promotion of free trade agreements outside the EU
13. According to the proposal for the Council Directive, what is considered an
obstacle to the completion of the internal market?
□ A. The absence of a common language among member states
□ B. The lack of technological advancements in data processing
□ C. The diversity of national approaches and lack of community-level protection
□ D. The high costs associated with implementing data protection laws
14. What significant aspect distinguishes Convention 108 from earlier guidelines on
data protection?
□ A. It is the first legally binding international instrument
□ B. It is a non-binding agreement
□ C. It focuses solely on automated data processing
□ D. It was adopted by the United Nations
