CIPP/E Exam style Questions
A key element of the OECD Guidelines is the "Individual Participation Principle". What elements
of the GDPR provide the nearest equivalent to that principle? - ANS-The rights granted to
records subjects under Articles 12 - 22
A famous video manufacturing corporation primarily based in Spain, however films
documentaries worldwide, has simply finished recording numerous hours of footage, presenting
human beings in Madrid. Under what condition might the business enterprise NOT be required
to attain the consent of every person whose image they use for their documentary? - ANS-If the
organisation's reputation as a documentary provider permits it to say valid hobby.
According to the E-Commerce Directive, in which is the location of the Establishment for a
organization offering services thru an internet website confirmed through the GDPR? -
ANS-Where the selections about processing are made
According to the GDPR, how is pseudonymous personal facts described? - ANS-Data that could
now not be attributed to a specific information situation without using extra facts stored
separately
Article five (1, B) of the GDPR states that private statistics should be amassed for specified,
specific and legitimate purposes and not in addition processed in a way incompatible with those
purposes. Based on that article, what is the impact of a member country's interpretation of the
phrase "incompatible"? - ANS-It suggests the diploma of pliability a controller has in the use of
private information in methods which could vary from its original intended reason.
How does the GDPR now define Processing? - ANS-Any act involving the amassing and
recording of private records
How is the retention of communications site visitors information for regulation enforcement
purposes addressed by European records protection regulation? - ANS-The GDPR allows the
retention of such facts for the prevention, research, detection or prosecution of crook offences
simplest.
Tanya is the DPO for Curtains INC, a GDPR controller. She has recommended that the
enterprise encrypt all personal information at rest. Which GDPR principle is she following? -
ANS-Integrity and confidentiality
Under the GDPR, who could be LEAST in all likelihood to be allowed to have interaction in the
series, use, and disclosure of a information concern's touchy medical information without the
statistics concern's information or consent? - ANS-A journalist writing an editorial regarding the
A key element of the OECD Guidelines is the "Individual Participation Principle". What elements
of the GDPR provide the nearest equivalent to that principle? - ANS-The rights granted to
records subjects under Articles 12 - 22
A famous video manufacturing corporation primarily based in Spain, however films
documentaries worldwide, has simply finished recording numerous hours of footage, presenting
human beings in Madrid. Under what condition might the business enterprise NOT be required
to attain the consent of every person whose image they use for their documentary? - ANS-If the
organisation's reputation as a documentary provider permits it to say valid hobby.
According to the E-Commerce Directive, in which is the location of the Establishment for a
organization offering services thru an internet website confirmed through the GDPR? -
ANS-Where the selections about processing are made
According to the GDPR, how is pseudonymous personal facts described? - ANS-Data that could
now not be attributed to a specific information situation without using extra facts stored
separately
Article five (1, B) of the GDPR states that private statistics should be amassed for specified,
specific and legitimate purposes and not in addition processed in a way incompatible with those
purposes. Based on that article, what is the impact of a member country's interpretation of the
phrase "incompatible"? - ANS-It suggests the diploma of pliability a controller has in the use of
private information in methods which could vary from its original intended reason.
How does the GDPR now define Processing? - ANS-Any act involving the amassing and
recording of private records
How is the retention of communications site visitors information for regulation enforcement
purposes addressed by European records protection regulation? - ANS-The GDPR allows the
retention of such facts for the prevention, research, detection or prosecution of crook offences
simplest.
Tanya is the DPO for Curtains INC, a GDPR controller. She has recommended that the
enterprise encrypt all personal information at rest. Which GDPR principle is she following? -
ANS-Integrity and confidentiality
Under the GDPR, who could be LEAST in all likelihood to be allowed to have interaction in the
series, use, and disclosure of a information concern's touchy medical information without the
statistics concern's information or consent? - ANS-A journalist writing an editorial regarding the
