CIPP-E practice questions 91–100

1. Question 91 · 290 in bank

   What was the aim of the European Data Protection Directive 95/46/EC?

   • ATo harmonize the implementation of the European Convention of Human Rights across all member states.
   • BTo implement the OECD Guidelines on the Protection of Privacy and trans-border flows of Personal Data.
   • CTo completely prevent the transfer of personal data out of the European Union.
   • DTo further reconcile the protection of the fundamental rights of individuals with the free flow of data from one member state to another.

   Show answer

   Answer: D

   Next question

2. Question 92 · 290 in bank

   What is the key difference between the European Council and the Council of the European Union?

   • AThe Council of the European Union is helmed by a president.
   • BThe Council of the European Union has a degree of legislative power.
   • CThe European Council focuses primarily on issues involving human rights.
   • DThe European Council is comprised of the heads of each EU member state.

   Show answer

   Answer: D

   Next question

3. Question 93 · 290 in bank

   Which change was introduced by the 2009 amendments to the e-Privacy Directive 2002/58/EC?

   • AA voluntary notification for personal data breaches applicable to all data controllers.
   • BA voluntary notification for personal data breaches applicable to electronic communication providers.
   • CA mandatory notification for personal data breaches applicable to all data controllers.
   • DA mandatory notification for personal data breaches applicable to electronic communication providers.

   Show answer

   Answer: D

   Next question

4. Question 94 · 290 in bank

   What is a reason the European Court of Justice declared the Data Retention Directive invalid in 2014?

   • AThe requirements affected individuals without exception.
   • BThe requirements were financially burdensome to EU businesses.
   • CThe requirements specified that data must be held within the EU.
   • DThe requirements had limitations on how national authorities could use data.

   Show answer

   Answer: A

   Next question

5. Question 95 · 290 in bank

   Which type of personal data does the GDPR define as a “special category” of personal data?

   • AEducational history.
   • BTrade-union membership.
   • CClosed Circuit Television (CCTV) footage.
   • DFinancial information.

   Show answer

   Answer: B

   Next question

6. Question 96 · 290 in bank

   After leaving the EU under the terms of Brexit, the United Kingdom will seek an adequacy determination. What is the reason for this?

   • AThe Insurance Commissioner determined that an adequacy determination is required by the Data Protection Act.
   • BAdequacy determinations automatically lapse when a Member State leaves the EU.
   • CThe UK is now a third country because it’s no longer subject to the GDPR.
   • DThe UK is less trustworthy now that its not part of the Union.

   Show answer

   Answer: C

   Next question

7. Question 97 · 290 in bank

   To which of the following parties does the territorial scope of the GDPR NOT apply?

   • AAll member countries of the European Economic Area.
   • BAll member countries party to the Treaty of Lisbon.
   • CAll member countries party to the Paris Agreement.
   • DAll member countries of the European Union.

   Show answer

   Answer: C

   Next question

8. Question 98 · 290 in bank

   What must a data controller do in order to make personal data pseudonymous?

   • ASeparately hold any information that would allow linking the data to the data subject.
   • BEncrypt the data in order to prevent any unauthorized access or modification.
   • CRemove all indirect data identifiers and dispose of them securely.
   • DUse the data only in aggregated form for research purposes.

   Show answer

   Answer: A

   Next question

9. Question 99 · 290 in bank

   Which of the following entities would most likely be exempt from complying with the GDPR?

   • AA South American company that regularly collects European customers’ personal data.
   • BA company that stores all customer data in Australia and is headquartered in a European Union (EU) member state.
   • CA Chinese company that has opened a satellite office in a European Union (EU) member state to service European customers.
   • DA North American company servicing customers in South Africa that uses a cloud storage system made by a European company.

   Show answer

   Answer: D

   Next question

10. Question 100 · 290 in bank

    Article 29 Working Party has emphasized that the GDPR forbids “forum shopping”, which occurs when companies do what?

    • AChoose the data protection officer that is most sympathetic to their business concerns.
    • BDesignate their main establishment in member state with the most flexible practices.
    • CFile appeals of infringement judgments with more than one EU institution simultaneously.
    • DSelect third-party processors on the basis of cost rather than quality of privacy protection.

    Show answer

    Answer: B

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CIPP-E practice, question 91. 290 questions available.