PDP9 무료 덤프문제 온라인 액세스

What is the basis of the accountability and data governance obligation (Article 5 (2) of the GDPR)?

• A.Processors have overarching responsibility to ensure their processing is compliant
• B.The controller shall appoint a DPO before carrying out large scale processing
• C.The controller shall be responsible for. and be able to demonstrate compliance with the data protection principles.
• D.Controllers and Processors each have a responsibility to conduct legitimate interests balancing tests before processing data for direct marketing

What does NOT have an exemption prescribed under schedule 3 of the Data Protection Act 2018?

• A.Social Work Data.
• B.Education data, examination scripts and marks
• C.Credit checking agency data
• D.Health data

Who is entitled to a private life by law in the UK?

• A.All individuals save for Members of Parliament
• B.All individuals.
• C.Private individuals who do not conduct their business on public platforms (such as professional sports people and actors
• D.Nobody

What is the meaning of storage limitation in relation to UK GDPR Article 5 (1 )(e)?

• A.Only storing data in locations within the EU. except where there is an adequacy decision.
• B.Keeping identifiable personal data for no longer than is necessary for the intended processing
• C.Limiting the number of records stored in any single repository to minimise risk surface.
• D.Storing data in a secure format only permitting access to those with a business need

Describe the act of processing under the authority of a controller or processor as stipulated in UK GDPR Article 29.

• A.The processor shall consult the supervisory authority prior to processing where a data protection impact assessment indicates that the processing would result in a high risk in the absence of measures taken by the processor to mitigate the risk.
• B.Each processor and, where applicable, the processors representative shall maintain a record of all categories of processing activities earned out on behalf of a controller.
• C.A processor shall not process those data except on instructions from the controller, unless required to do so by domestic law
• D.The processor shall implement appropriate technical and organisational measures for ensuring that, by default, only personal data which are necessary for each specific purpose of the processing are processed.