PDP9 무료 덤프문제 온라인 액세스

An investigation reveals that an individual is defrauding a public authority After a (suspected) tip off from a senior manager, the individual submits a Subject Access Request to the authority asking for a copy of all personal data relating to any investigations that have been carried out What would be the BEST approach?

• A.They do not need to disclose details of the investigation as they can rely on the crime and taxation exemption on the basis that disclosure would prejudice the investigation
• B.This is criminal offence data and therefore under the provisions of the Data Protection Act 2018, there is no obligation to disclose
• C.The legal and professional privilege exemption applies to this information, and therefore the information does not need to be disclosed
• D.While the right to inform does not apply in relation to criminal acts, they need to disclose the information as this has not yet been passed to the police.

Describe the act of processing under the authority of a controller or processor as stipulated in UK GDPR Article 29.

• A.The processor shall consult the supervisory authority prior to processing where a data protection impact assessment indicates that the processing would result in a high risk in the absence of measures taken by the processor to mitigate the risk.
• B.Each processor and, where applicable, the processors representative shall maintain a record of all categories of processing activities earned out on behalf of a controller.
• C.The processor shall implement appropriate technical and organisational measures for ensuring that, by default, only personal data which are necessary for each specific purpose of the processing are processed.
• D.A processor shall not process those data except on instructions from the controller, unless required to do so by domestic law

When does a personal data breach need to be reported to a supervisory authority?

• A.When the controller's right of freedom of expression outweighs the data subject's right to a private home and family life.
• B.Only where a disclosure is of special category data
• C.Where the personal data breach is likely to result in a risk to the rights and freedoms of natural persons.
• D.All personal data breaches must be reported to a supervisory authority

Which of the following would NOT be a personal data breach'?

• A.The loss of a memory stick containing the names and addresses of students in private accommodation
• B.The accidental destruction of a current employee's HR file.
• C.The unauthorised changing of a persons address details on a database of customers.
• D.The accidental deletion of an organisation's information security policy from the public facing website

In which of the following circumstances does a public authority NOT need to appoint a Data Protection Officer?

• A.Where it is a court acting in its judicial capacity
• B.Where it processes special category data
• C.Where it is defined as a public body in the Data Protection Act 2018
• D.Where it processes a large amount of personal data