CPE EXAM QUESTIONS & ANSWERS
95/46/EC Data Protection Initiative - Answers :EU Data Protection Directive (also known
as Directive 95/46/EC) is a regulation adopted by the European Union to protect the
privacy and protection of all personal data collected for or about citizens of the EU,
especially as it relates to processing, using or exchanging such data.
What pieces of information must be given to data subjects before collection of personal
data - Answers :You must provide individuals with information including: your purposes
for processing their personal data, your retention periods for that personal data, and
who it will be shared with. We call this 'privacy information'.
You must provide privacy information to individuals at the time you collect their personal
data from them.
What must be included in a written agreement between a processor and controller? -
Answers :☐ the subject matter of the processing;
☐ the duration of the processing;
☐ the nature and purpose of the processing;
☐ the type of personal data involved;
☐ the categories of data subject;
☐ the controller's obligations and rights.
What obligation does a data controller have when appointing a DPO - Answers :☐ Our
DPO reports directly to our highest level of management and is given the required
independence to perform their tasks.
☐ We involve our DPO, in a timely manner, in all issues relating to the protection of
personal data.
☐ Our DPO is sufficiently well resourced to be able to perform their tasks.
Who can adopt standard contractual clauses - Answers :European commission
What does a layered notice consist of? - Answers :
Which institution has the power to adopt findings that confirm the adequacy of the data
protection level in a new country? - Answers :European commission
DSAR Time Limit - Answers :30 days with a 2 month exstention
95/46/EC Data Protection Initiative - Answers :EU Data Protection Directive (also known
as Directive 95/46/EC) is a regulation adopted by the European Union to protect the
privacy and protection of all personal data collected for or about citizens of the EU,
especially as it relates to processing, using or exchanging such data.
What pieces of information must be given to data subjects before collection of personal
data - Answers :You must provide individuals with information including: your purposes
for processing their personal data, your retention periods for that personal data, and
who it will be shared with. We call this 'privacy information'.
You must provide privacy information to individuals at the time you collect their personal
data from them.
What must be included in a written agreement between a processor and controller? -
Answers :☐ the subject matter of the processing;
☐ the duration of the processing;
☐ the nature and purpose of the processing;
☐ the type of personal data involved;
☐ the categories of data subject;
☐ the controller's obligations and rights.
What obligation does a data controller have when appointing a DPO - Answers :☐ Our
DPO reports directly to our highest level of management and is given the required
independence to perform their tasks.
☐ We involve our DPO, in a timely manner, in all issues relating to the protection of
personal data.
☐ Our DPO is sufficiently well resourced to be able to perform their tasks.
Who can adopt standard contractual clauses - Answers :European commission
What does a layered notice consist of? - Answers :
Which institution has the power to adopt findings that confirm the adequacy of the data
protection level in a new country? - Answers :European commission
DSAR Time Limit - Answers :30 days with a 2 month exstention
