GDPR

What is the maximum fine a company can face for non-compliance with GDPR?

• €10 million
• €20 million or 4% of annual global turnover, whichever is higher
• £20 million or 4% of annual global turnover, whichever is higher
• £10 million

Under GDPR, within how many hours must a data breach be reported to the relevant supervisory authority?

• 24 hours
• 36 hours
• 48 hours
• 72 hours

Which of the following is NOT a legal basis for processing personal data under GDPR?

• Consent
• Contractual necessity
• Data minimisation
• Legitimate interests

What does GDPR stand for?

• General Data Protection Regulation
• General Digital Privacy Regulation
• General Data Privacy Regulation
• General Digital Protection Regulation

Which Article of GDPR outlines the principles relating to processing of personal data?

• Article 3
• Article 5
• Article 7
• Article 9

Which of the following rights allows individuals to obtain from the controller confirmation as to whether or not personal data concerning them is being processed?

• Right to be forgotten
• Right to rectification
• Right of access
• Right to data portability

What role does the Data Protection Officer (DPO) play according to GDPR?

• Conducts marketing activities
• Ensures compliance with GDPR
• Develops software
• Manages customer service

In GDPR terminology, what is a 'Data Controller'?

• The entity that processes data on behalf of the data subject
• The entity that determines the purposes and means of processing personal data
• The entity that designs data protection policies
• The entity that supervises the DPO

Which GDPR principle states that personal data must be adequate, relevant, and limited to what is necessary?

• Lawfulness, fairness, and transparency
• Purpose limitation
• Data minimisation
• Accuracy

What is required for consent to be valid under GDPR?

• It must be implicit
• It must be given through silence
• It must be freely given, specific, informed, and unambiguous
• It must be obtained during purchase