GDPR quiz

"Data processor" is an entity which determines purposes and means of processing personal data.

• True

• False

Consent must always be provided in writing.

• True

• False

BI uses quiz app Kahoot to process data of its students and employees. In this scenario, Kahoot is likely:

• Joint data controller

• Data processor

• Data controller

• Data subjects

If you asked your university to delete all your personal data, they would always have to comply with your request.

• True

• False

• Can't say

GDPR is always applicable to data of European citizens.

• False

• True

All data processors must secure Article 6 legal basis for processing data (such as consent).

• False

• True

A data subject walks into a bar. Cameras record him. Processing is unlawful because no consent was given.

• True

• False

Your aunt wants to mail family Christmas photo to herfriends, but has heard it's forbidden under GDPR. You tell her that's not true, and:

• Point to Art. 3 (territorial scope)

• Point to Art. 9 (special categories of data)

• Point to Art. 6 (lawfulness of processing)

• Point to Art. 2 (material scope)

"You hereby agree to provide us with location data, or stop using our streaming service". This consent is not valid.

• True

• False

An individual person can't be a data controller.

• True

• False