Studyclass

CIPP/E Privacy Book Chapter 3+4+5The Council of Europe Convention (1981) - correct answers It was the first legally binding international instrument with a worldwide scope. The Convention ensures appropriate protection for individual privacy but also recognizes the importance of the free flow of personal data for commerce and the exercise of public functions. It requires signatory states to implement its principles by enacting national legislation. Data Protection Directive (1995) - correct a...

Cipp/e Privacy book chapter 9+10+11 The right to access (article 12) - correct answers Member states shall guarantee that every data subject has the right to obtain from the controller, without constraint at reasonable intervals (average once per year) and without excessive delay or expense (1) a Description of the processing activities (purposes, categories of data, recipients or categories and the logic involved in automated decisions) and (2) Communication of the source and in a intelligible...

Cipp/E Privacy book chapter 12+13International data transfers - correct answers Article 25 bans the transfer of personal data to any country outside the EU economic Area unless that third country ensures an adequate level of privacy protection. The main aim of the Directive is to create a framework that protects and shields individual's personal information from misuse and abuse. Therefore blocks any attempts to weaken the protection. Scope of data transfers - correct answers A transfer unde...

Cipp/e privacy book chapter 14+15Legal basis for processing employee personal data - correct answers (1) consent, (2) Processing is necessary to fulfil an employment contract, (3) Processing is necessary for a legal obligation, (4) Legitimate interests. Workplace monitoring - correct answers EU law recognizes that an employee's privacy sphere in the workplace is protected. The right to privacy should be balanced again the legitimate rights of an employer to operate its business and protect t...

Cipp/e Privacy book chapter 16+17+18Data protection and direct marketing - correct answers The Data Processing Directive applies to all direct marketing communications. The e-Privacy Directive applies to digital marketing communications: over electronic communications networks, not to postal marketing. Also rules for online behavioral advertising. Right to opt out - correct answers Individuals must have a specific right to refuse (or opt out of) direct marketing sent by the data controller. M...

CIPP/e questions A German data subject was the victim of an embarrassing prank 20 years ago. A newspaper website published an article about the prank at the time, and the article is still available on the newspaper's website. Unfortunately, the prank is the top search result when a user searches on the victim's name. The data subject requests that SearchCo delist this result. SearchCo agrees, and instructs its technology team to avoid scanning or indexing the article. What else must S...

CIPP-E Quick StudyWhat are the 6 lawful bases for processing data under GDPR? 1. Consent 2. Contractual necessity 3. legal obligation 4. vital interests 5. public task 6. legitimate interest What are the 3 information provision obligations? 1. transparency principle 2. privacy notices 3. layered notices Brainpower Read More What are the requirements of a Non-EU Established entity with regard to the GDPR? They are only subject to the GDPR when they engage in activities inv...

CIPP/E Review QuestionsWhat did the principles of the Human Rights Declaration provide the basis for? - correct answers The principles enshrined in the Human Rights Declaration have provided the basis for all subsequent European data protection laws and standards. (Ch. 1) What right is contained in Article 12 of the Human Rights Declaration? - correct answers The right to a private life and associated freedoms is contained in Article 12 of the Human Rights Declaration. (Ch. 1) What right i...

CIPP/E, Long Set of QuestionsWhat is the CLOUD Act? - correct answers Clarifying Lawful Overseas Use of Data What are main points of CLOUD Act? - correct answers 1. Applies to information anywhere in the world if data is in the "possession, custody or control" of the recipient of the warrant. 2. A recipient can seek to quash the subpoena if it can show that the affected individual is not a United States person and that the required disclosure of that individual's data would violate the la...

CIPP/EUniversal Declaration of Human Rights - correct answers The Universal Declaration of Human Rights is an international document adopted by the United Nations General Assembly in 1948 that enshrines the rights and freedoms of all human beings. European Convention of Human Rights - correct answers The European Convention on Human Rights (ECHR) is an international treaty established by the Council of Europe. Adopted in 1950, it entered into force in 1953. Its purpose is to protect and pr...

CIPP/EProhibition of cross border data transfers under Data Privacy Directive 95/46/EC apply when - correct answers data transferred from a jurisdiction in the EU to a third country. What treaty or convention allowed the Data Protection Directive 95/46/EC to be used as a harmonising measure for European Member states. - correct answers The Treaty of Rome Direct marketing would include: - correct answers Email promoting new book on sale. What two opposing forces needed to be considered i...

CIPP/EUN's Universal Declaration of Human Rights - correct answers adopted by the United Nations General Assembly on December 10, 1948, in Paris, France. 2. specifies the basic principles that should always be adhered to irrespective of the culture in which one is doing business. not legally binding article 12 - right to privacy article 19 - right to free speech article 29(2) - balance between right to privacy and free speech European Convention on Human Rights - correct answers the Co...

CIPP/EIn which of the following cases, cited as an example by a WP29 guidance, would conducting a single data protection impact assessment to address multiple processing operations be allowed? - correct answers A railway operator who plans to evaluate the same video surveillance in all the train stations of his company. Article 5(1)(b) of the GDPR states that personal data must be "collected for specified, explicit and legitimate purposes and not further processed in a way incompatible with ...

CIPP/E Universal Declaration of Human Rights (UDHR) 1948, Art. 12 - correct answers i. First international legal instrument announcing a right to privacy ii. Catalyst for other human rights instruments in Europe. iii. Recognized universal values and traditions of "the inherent dignity and the equal and inalienable rights of all members of the human race in the foundation of freedom, justice, and peace in the world." European Convention on Human Rights (ECHR) 1950, Art. 8 - correct answer...

CIPP-E Accountability - correct answers A fair information practices principle, it is the idea that when personal information is to be transferred to another person or organization, the personal information controller should obtain the consent of the individual or exercise due diligence and take reasonable steps to ensure that the recipient person or organization will protect the information consistently with other fair use principles. Adequate Level of Protection - correct answers A label t...

CIPP/US, CIPP/US Practice Questions, CIPP/US, CIPP US In what ways can the enforcement action be brought to the FTC's attention? - correct answers 1. press reports covering the questionable practices2. complaints from consumer groups of competitors Which agencies are responsible for educational privacy? - correct answers Department of Education for the Family Educational Rights and Privacy Act. What are some of the ways that the FTC has played a prominent role in the development of US pr...

CIPP/USAccess - correct answers The ability to view personal information held by an organization. This may be supplemented by allowing updates or corrections to the information. U.S. laws often provide for access and correction when the information is used for any type of substantive decision making, such as for credit reports. Americans with Disabilities Act (ADA) - correct answers Bars discrimination against qualified individuals with disabilities; places restrictions on pre-employment medi...

Data Subject Rights (CIPP/E Certification Exam) Data Subject Rights Under GDPR - correct answers Articles 12-14: Right of Transparent Communication and Information Article 15: Right of Access Article 16: Right of Rectification Article 17: Right to Erasure ("Right to be forgotten") Article 18: Right to Restriction of Processing Article 19: Obligation to Notify Recipients Article 20: Right to data portability Article 21: Right to object Article 22: Right to not be subject to automated d...

Full CIPP/E examAccountability - correct answers The implementation of appropriate *technical and organizational measures* to ensure and be able to *demonstrate* that the handling of personal data is performed in accordance with relevant law, an idea codified in the EU General Data Protection Regulation and other frameworks, including APEC's Cross Border Privacy Rules. Traditionally has been a *fair information practices principle*, that due diligence and reasonable steps will be undertaken to ...

International Data Transfers (CIPP/E Exam)Rule for Transferring Data Outside of EEA - correct answers Transfers of PD outside of EEA may only take place subject to the following conditions: 1) Third country ensures adequate level of protection for the personal data as determined by Euroopeaen Commission 2) In absence oof that adequate level of protection, the controller or processor wishing to transfer the data provides appropriate safeguards on thee condition that enforceable data subject...