Privacy Compliance Quiz

Where should you publish your privacy policy and who should you introduce to your users?

• Publish your privacy policy on your website where it is easily accessible.

• Clearly introduce your Data Protection Officer (DPO) and provide their contact details.

• Ensure the policy explains your organization's privacy approach and user rights.

What are two key requirements for your DPO?

• The DPO must be independent in performing their duties.

• The DPO's contact details must be shared with employees, customers, and supervisory authorities.

• The DPO should have expertise in data protection laws and practices.

What must a privacy notice explain to users?

• The reasons (legal basis) for processing personal data.

• How and why the data will be used.

• The rights of data subjects.

• Who to contact for questions or complaints.

• Any potential data sharing with third parties.

Can you use payroll data for marketing? Why or why not?

• No, you cannot use payroll data for marketing.

• Data must only be used for the specific purpose it was collected.

• Using it for another purpose without consent is a violation of the purpose limitation principle.

What's wrong with collecting extra information 'just in case'?

• Collecting unnecessary data increases privacy risks.

• It violates the principle of data minimization.

• Only collect data that is strictly necessary for the intended purpose.

How can users help keep their data accurate?

• Provide users with easy ways to update or correct their information.

• Regularly review and update records.

• Respond promptly to requests for data correction.

What should you do with old customer data you no longer need?

• Follow your data retention policy to identify obsolete data.

• Delete or anonymize data that is no longer needed.

• Ensure secure disposal to prevent unauthorized access.

Name two ways to protect sensitive data.

• Use encryption to secure data during storage and transmission.

• Implement strong passwords and access controls.

• Regularly update security measures and provide staff training.

Why should you keep logs of data processing activities?

• To demonstrate compliance with privacy laws.

• To provide evidence during audits or investigations.

• To help identify and address potential data protection issues.

What does 'privacy by design' mean for a new app?

• Integrate privacy controls from the start of the project.

• Set default settings to be privacy-friendly.

• Minimize data collection and ensure strong security by default.