GDPR Principle A Quiz

Which of the following is NOT one of the main requirements under Principle A of the GDPR?

• Lawfulness

• Fairness

• Accuracy

• Transparency

Under Principle A, “lawfulness” means that personal data must be processed based on which of the following?

• Legitimate reasons provided by the organization

• Any valid legal basis, such as consent or contract

• The individual’s social media preferences

• Any reason the organization decides internally

The concept of “fairness” in Principle A primarily ensures that personal data is processed in a way that is:

• Easily accessible to everyone

• Predictable and understandable to the individual

• Automatically deleted after processing

• Only stored in the EU

What is meant by “transparency” under Principle A of the GDPR?

• Keeping individuals fully informed about how their data will be used

• Allowing individuals to access all data collected about them at any time

• Making data collection methods visible to the general public

• Ensuring data is processed only in secure environments

Which of the following actions would likely violate the transparency requirement in Principle A?

• Not disclosing data collection methods to users

• Providing clear and accessible privacy policies

• Regularly updating users about data usage

• Ensuring user consent before data collection

Which of the following is an example of using complex legal language that’s difficult to understand?

• Providing a clear and accessible privacy notice

• Using complex legal language that’s difficult to understand

• Clearly outlining the purpose of data collection

• Allowing individuals to update their personal information

Under the GDPR’s Principle A, data processing can only be considered lawful if it meets one of the lawful bases. Which of the following is NOT a lawful basis?

• Consent from the individual

• Contractual necessity

• Preventing competition

• Legitimate interest of the controller

Which lawful basis for data processing is often required when an organization needs to collect personal data to fulfill a contract with the individual?

• Legitimate interest

• Consent

• Contractual necessity

• Vital interest

What must organizations provide to comply with the fairness and transparency requirements of Principle A?

• An overview of potential risks involved in data processing

• A detailed report of all employees who access the data

• Clear information on data processing purposes and individuals’ rights

• A copy of every email exchanged with the individual

Which of the following best describes the goal of “lawfulness” in Principle A?