CPE Final Exam Questions With All Correct Answers.

95/46/EC Data Protection Initiative - Answer EU Data Protection Directive (also known as Directive 95/46/EC) is a regulation adopted by the European Union to protect the privacy and protection of all personal data collected for or about citizens of the EU, especially as it relates to processing, using or exchanging such data. What pieces of information must be given to data subjects before collection of personal data - Answer You must provide individuals with information including: your purposes for processing their personal data, your retention periods for that personal data, and who it will be shared with. We call this 'privacy information'. You must provide privacy information to individuals at the time you collect their personal data from them. What must be included in a written agreement between a processor and controller? - Answer ☐ the subject matter of the processing; the duration of the processing; the nature and purpose of the processing; the type of personal data involved; the categories of data subject; the controller's obligations and rights. What obligation does a data controller have when appointing a DPO - Answer ☐ Our DPO reports directly to our highest level of management and is given the required independence to perform their tasks. We involve our DPO, in a timely manner, in all issues relating to the protection of personal data. Our DPO is sufficiently well resourced to be able to perform their tasks.