Free PDPF – EXIN Privacy and Data Protection Foundation Practice Test Question

Select an option, then click Submit answer.

• ○

  Directive 95/46 / EC has the force of law and all EU Member States must follow it without changing.

• ○

  The GDPR offers guidance for EU Member States and can create their own laws to comply with the regulatio

• ○

  Directive 95/46 / EC offers guidance for EU Member States and can create their own laws to suit the directive. The GDPR has the force of law and all EU Member States must follow it without changing it.
  
  

Select an option, then click Submit answer.

• ○

  A directive has the force of law and all EU Member States must follow it without changing it.

• ○

  The regulation provides guidance for EU Member States and they can create their own laws to conform to the regulatio

• ○

  The directive provides guidance for EU member states and they can create their own laws to suit the directive. A regulation has the force of law and all EU Member States must follow it without changing it.
  
  

Select an option, then click Submit answer.

• ○

  Transfers based on the laws of the non-EEA country concerns

• ○

  Transfers falling under World Trade Organization rules

• ○

  Transfers governed by approved binding corporate rules (BCR)

• ○

  Transfers within a global corporation or organization
  
  

Select an option, then click Submit answer.

• ○

  Right to limitation of treatment

• ○

  Right to rectification

• ○

  Data subject’s right of access

• ○

  Right to object and automated individual decision-making
  
  

Select an option, then click Submit answer.

• ○

  Application of new technologies that may imply a high risk to the rights and freedoms of data subjects.

• ○

  There is no security policy and information security risk analysis.

• ○

  In all types of personal data processing.
  
  

Select an option, then click Submit answer.

• ○

  Personal data can only be collected for explicit, legitimate and specific purposes and cannot be processed for any other purpose.

• ○

  Only the personal data needed to achieve a specific purpose should be collected.

• ○

  The least privacy-violating means should be used when processing personal data.

• ○

  Personal data must be kept for a period not longer than necessary.
  
  

Select an option, then click Submit answer.

• ○

  Not holding more data than is strictly required for processing

• ○

  An indication of timeframes if processing relates to erasure

• ○

  Data may only be collected for explicit and legitimate purposes

• ○

  An approach that implements data protection from the start (Correct)