N5CS: General Data Protection Regulation (GDPR)

What is one of the prerequisites for understanding the General Data Protection Regulation (GDPR)?

• Knowledge of advanced mathematical concepts

• Experience with data analysis software

• Understanding of how to use digital technologies to process and manage information responsibly

• Proficiency in a second language

Answer explanation

Understanding of how to use digital technologies to process and manage information responsibly is a prerequisite for understanding the General Data Protection Regulation (GDPR).

According to the GDPR, how should data be processed?

• Arbitrarily and without transparency

• Lawfully, fairly, and in a transparent manner in relation to individuals

• Only with the consent of the data protection officer

• Without any consideration for fairness

Answer explanation

According to the GDPR, data should be processed lawfully, fairly, and in a transparent manner in relation to individuals.

For what purpose should data be used under GDPR?

• For any purpose deemed necessary by the data controller

• For the declared purpose only

• For marketing and advertising without restrictions

• For unlimited purposes as long as it benefits the company

Answer explanation

For the declared purpose only

Under GDPR, data should be kept for:

• An indefinite period of time

• As long as the data subject agrees

• No longer than necessary

• A minimum of 10 years

Answer explanation

Under GDPR, data should be kept for no longer than necessary, ensuring compliance with data protection regulations.

What is a requirement for data security under GDPR?

• Data should be held publicly

• Data should be held securely

• Data security is not a concern under GDPR

• Data should be encrypted only by request

Answer explanation

Data under GDPR must be held securely to ensure data security, making the correct choice 'Data should be held securely'.

What is the purpose of the General Data Protection Regulation (GDPR)?

• To provide a set of rules designed to give EU citizens less control over their personal data

• To strengthen or replace existing data protection laws and make them relevant in the Internet age

• To restrict the way personal data is used by companies in the EU

• To allow data subjects to have less transparency from data holders

Answer explanation

To strengthen or replace existing data protection laws and make them relevant in the Internet age

Who is referred to as the 'data subject' in the GDPR?

• The company or organization that uses personal data

• The individual whose data is being collected

• The third-party who processes data for the data controller

• The individual who processes personal data

Answer explanation

The individual whose data is being collected is referred to as the 'data subject' in the GDPR.

What is considered 'personal data' under the GDPR?

• Any data that is publicly available

• Any data that cannot be used to identify an individual

• Any data that can be used to identify an individual directly

• Any data that is related to the data processor

Answer explanation

Any data that can be used to identify an individual directly is considered 'personal data' under the GDPR.

What is the role of a 'data controller'?

• To provide recommendations or reports based on data processing

• To collect data from various data subjects

• To use personal data and manage how that data is processed

• To inform the data subject how their data will be used

Answer explanation

To use personal data and manage how that data is processed

What does a 'data processor' do?

• Collects personal data from data subjects

• Provides a service to the data subject

• Provides a service to the data controller and processes data for them

• Manages how personal data is used by the data controller

Answer explanation

A 'data processor' provides a service to the data controller and processes data for them, which involves handling and managing the data on behalf of the controller.