Data Privacy

1. What is the purpose of the Data Protection Policy?

• 1. To describe data protection standards and applicable principles

• 1. To outline how to create data breaches

• To focus on principles for data transfer

• 1. To define data population

1. Who is considered a Data Controller?

• 1. An employee of the Data Controller

• 1. A person who processes data on behalf of the Data Controller

• A natural or legal person (or entity) who determines the purposes and manner of data processing

• 1. A person who stores data

1. What is the definition of Personal Data?

• Data that can be processed electronically

• 1. Any information relating to an identifiable individual

• 1. Data stored in physical format

• 1. Data that is anonymized

Which of the following is a right of Data Subjects?

• 1. The right to rectify data

• 1. The right to transfer data

• 1. The right to encrypt data

• 1. The right to anonymize data

1. What is the main objective of the Personal Data Breach Policy?

• To prevent data breaches only

• To prevent data breaches and manage actual or suspected data breaches

• To transfer personal data

• To encrypt personal data

1. Which of the following are examples of Personal Data Breaches?

• 1. Unauthorized access to a system containing personal data

• 1. Loss or theft of an electronic device containing personal data

• 1. Corruption of personal data

• 1. All of the above

1. What is the role of the Data Protection Officer (DPO)?

• 1. To oversee and monitor the company's data protection strategy

• To manage data transfers

• 1. To encrypt personal data

• 1. To store personal data

1. What is the purpose of the Personal Data Transfer Policy?

• 1. To establish principles that govern the transfer of personal data

• To manage data breaches

• To describe data protection standards

• To define data processing

1. What is required for transferring personal data to a data processor?

• Encryption of data

• Anonymization of data

• Deletion of data

• Data processing agreements

1. What should be done in the event of a suspected or actual Personal Data Breach?

• Contain the breach

• Recover the personal data

• Notify relevant parties

• All of the above