EXIN Privacy & Data Protection Foundation - Quiz 4

What does GDPR stand for?

• General Data Protection Regulation
• General Digital Protection Regulation
• General Data Processing Regulation
• General Digital Processing Regulation

Which of the following is a key principle of the GDPR?

• Data minimization
• Data maximization
• Data deletion
• Data transferability

Which of the following is a right granted to individuals under the GDPR?

• The right to be forgotten
• The right to data ownership
• The right to restrict data collection
• The right to access data deletion records

Which of these is NOT considered sensitive personal data according to GDPR?

• Racial or ethnic origin
• Political opinions
• Genetic data
• Email address

What is a data subject under GDPR?

• A company that processes personal data
• An individual whose personal data is processed
• A third-party service provider
• A government body

Under GDPR, how long can personal data be retained?

• For as long as necessary for the purpose for which it was collected
• Forever
• Until the individual requests deletion
• For a minimum of 5 years

What is the primary purpose of the GDPR?

• To protect the personal data of individuals and to regulate how it is processed within the EU
• To regulate the processing of financial transactions
• To allow businesses to collect as much personal data as they want
• To standardize online transactions within the EU

What does the term “data breach” refer to under GDPR?

• Unauthorized access to or disclosure of personal data
• Data that has been lost or corrupted
• A case where personal data is intentionally shared with unauthorized parties
• Any personal data that has been stored for over a year

Under GDPR, what should a data controller do if there is a data breach?

• Notify the data subject and the relevant supervisory authority within 72 hours
• Notify the data subject within 7 days
• Delete the affected data
• Only inform the affected employees

What is the role of the Data Protection Officer (DPO) under GDPR?

• To oversee the organization’s compliance with data protection laws and advise on privacy matters
• To process personal data
• To ensure data subjects are notified about breaches
• To handle the enforcement of fines