GDPR Quiz

From when will the BDPR be enforceable in the UK?

25th May 2019

1st January 2018

25th May 2018

GDPR applies to which types of individuals or organizations:

Any organisation that processes personal data

All data controllers and processors established in the EU and organisations that target EU citizens

Data controllers operating in the EU

Will the Brexit decision have any initial impact on GDPR in the UK?

Yes

When should you start preparing for GDPR implementation?

Now

On 25th May 2018

On 24th May 2018

What is the maximum fine for a GDBR breach?

�10,000,000 or up to 2% of annual turnover, whichever is greater

There is no maximum fine

�20,000,000 or up to 4% of annual turnover, whichever is greater

What is meant by a personal data breach under the GDPR?

The loss of personal data

The unauthorised disclosure of personal data

The alteration of personal data

All of the above

Under current proposed amendments, PECR legislation will state that:

You must tell people if you set cookies on your website

You can only process location data if it is anonymous or you have consent to use it for a value-added service

All marketing to individuals by phone, text or email must be opt in

You must gain express opt-in consent for reverse searches

Explicit consent must be given:

When processing all personal data

When processing sensitive personal data or in the transfer of data across borders c)

Only for children

Which of the following is NOT classified as sensitive personal data?

Trade union membership

IP address

Data concerning sexual orientation

Political opinions

Under the GDPR, an individual has the right to request the removal of personal data. Under which circumstance can a company refuse to comply with this request?

When the data is no longer necessary

When archiving information for scientific historical research

When the individual withdraws consent

When the individual objects to the processing

A Data Protection Officer (DPO) must be appointed:

If an organisation conducts large scale systematic monitoring or processes large amounts of sensitive personal data

If an organisation processes any sensitive personal data relating to EU citizens

In all cases, regardless of the levels of data processing

Complete the following statement: Consent must be explicit…

In the case of sensitive personal data or trans-border data flow

Only for children under the age of 16 c)

For all personal data

Within what timeframe must organisations notify the supervisory authority of data breaches?

Within 48 hours

Within 72 hours

Within 12 hours

When GDPR regulation is enforced in May 2018, citizens will have new rights. But in terms of what?

The right to be forgotten

The right of data portability

Both A and B

Data access requests must be responded to, within what timeframe?

40 days

10 working days

1 month

GDPR Quiz

More Quizzes