EMT Practice Test

1. Question Content...

---

Question1: Describe the act of processing under the authority of a controller or processor as stipulated in UK GDPR Article 29.

Question2: Which of the following statements MOST accurately describes the potential impact of Al on the principle of transparency?

Question3: Which of the following is NOT a key requirement of independent supervisory authorities?

Question4: A privacy notice MUST NOT contain

Question5: What is the meaning of storage limitation in relation to UK GDPR Article 5 (1 )(e)?

Question6: How are data sharing practices governed by data protection law?

Question7: Who is entitled to a private life by law in the UK?

Question8: Which of the below would be the BEST example of processing that could utilise the Public Interest Task lawful basis?

Question9: Of the following options which is NOT a purpose of carrying out a Data Protection Impact Assessment (DPIA)?

Question10: Which of the following is NOT a processor obligation?

Question11: In which of the following circumstances would Privacy and Electronic Communications Regulation (PECR) NOT apply?

Question12: A company based in France uses a specialist IT support business in China The two companies have signed a Data Processing Agreement.The Chinese business provides specialist IT support for the French company's digital customer experience platform No personal data is sent to China, but employees of the Chinese business access the platform on a regular basis and have access to the databases that sit behind it.Which of the following statements is CORRECT in relation to the French company's requirements to ensure compliance with the GDPR?

Question13: Of the following options which is NOT a purpose of carrying out a Data Protection Impact Assessment (DPIA)?

Question14: A company has twenty retail outlets in France and thirty retail outlets in Belgium The payroll department and the Data Protection Officer are based in Poland.The Company Board and administrative functions are based in Germany. Determine where the company's 'mainestablishment' would be

Question15: Which of the following would NOT be a personal data breach'?

Question16: Article 9(2)(c) of UK GDPR condition of processing special category data in the vital interests of the data subject is only applicable in which of the following circumstances:

Question17: What factors should be considered when looking at security of processing under Article 32 of the GDPR?
Select the INCORRECT answer

Question18: What are Information Society Services'? Select the INCORRECT answer