PDP9 무료 덤프문제 온라인 액세스

A company has twenty retail outlets in France and thirty retail outlets in Belgium The payroll department and the Data Protection Officer are based in Poland.The Company Board and administrative functions are based in Germany. Determine where the company's 'mainestablishment' would be

• A.Poland
• B.Germany
• C.Belgium
• D.France

When does a personal data breach need to be reported to a supervisory authority?

• A.Only where a disclosure is of special category data
• B.All personal data breaches must be reported to a supervisory authority
• C.Where the personal data breach is likely to result in a risk to the rights and freedoms of natural persons.
• D.When the controller's right of freedom of expression outweighs the data subject's right to a private home and family life.

Which of the following is NOT a processor obligation?

• A.To provide the controller with corporate information relating to its board members.
• B.To follow the instructions of the controller in processing personal data
• C.To inform the controller of any intended changes of other processors so they can object
• D.To consult the controller prior to appointing any processor.

What is the Employment Practices Code?

• A.Guidance on the requirements for employing a Data Protection Officer
• B.A set of exemptions that can be used when processing data related to employees
• C.A statutory framework for implementing data protection training for employees.
• D.Guidance on meeting legal requirements of data protection when employing staff

Article 9(2)(c) of UK GDPR condition of processing special category data in the vital interests of the data subject is only applicable in which of the following circumstances:

• A.When the data subject is physically unable to be present
• B.When the data subject refuses to consent
• C.When another lawful basis applies.
• D.When a data subject is incapacitated