GDPR

What does GDPR stand for?

• General Data Protection Regulation
• Global Data Privacy Rule
• General Digital Privacy Regulation
• General Data Protection Rule

Who does the GDPR apply to?

• Only companies with over 500 employees
• European Union citizens
• Any organisation handling EU citizens' data
• Only government agencies

What is the main goal of GDPR?

• To make data collection easier for businesses
• To protect the privacy rights of individuals
• To encourage the sale of personal data
• To limit international data transfer

What is considered personal data under GDPR?

• Only sensitive information like medical records
• Any information related to an identified or identifiable individual
• Information available publicly
• Data collected from social media platforms

What is the maximum fine for a GDPR violation?

• 20 million Euros or 4% of global annual turnover (whichever is higher)
• 10,000 Euros
• 1 million Euros
• No fines, only warnings

Which of the following is a lawful basis for processing personal data under GDPR?

• Selling data for marketing purposes

• Legitimate interest

• Processing data for business development

• Processing data based on assumptions

Who is responsible for ensuring GDPR compliance within an organisation?

• Data subjects
• Data processors
• Data protection officers
• Government regulators

What is a Data Protection Impact Assessment (DPIA)?

• A tool to assess the impact of data protection on company profits
• An assessment of potential risks associated with processing personal data
• A certification required for data controllers
• A report on data breaches

Under GDPR, what is the maximum time to report a data breach?

• 72 hours
• 7 days
• 1 month
• 48 hours

What is the age requirement for children to give consent for their data to be processed under GDPR?

• 16 years old
• 13 years old
• 18 years old
• There's no specific age mentioned