CISSP® Certification Domain 1 Security and Risk Management Video Boot Camp for 2022 - General Data Protection Regulation

The video tutorial provides an in-depth look at the General Data Protection Regulation (GDPR) in the EU, highlighting its proactive approach to data protection and privacy compared to the US. It covers the importance of compliance, potential fines, and the rights of individuals under GDPR, such as data access and the right to be forgotten. The tutorial also discusses breach notification rules and company responsibilities, including appointing a data protection officer. Additionally, it reviews legacy data protection laws like the EU Data Protection Directive and the invalidation of Safe Harbor and Privacy Shield.

What is the main difference between the EU and US approaches to data protection?

• Both the EU and US have a patchwork of laws.

• The EU has a unified approach, while the US has a patchwork of laws.

• The US has a unified approach, while the EU has a patchwork of laws.

• Both the EU and US have a unified approach.

What is the maximum fine a company can face for violating GDPR?

• €40 million or 8% of annual revenue, whichever is greater.

• €10 million or 2% of annual revenue, whichever is greater.

• €20 million or 4% of annual revenue, whichever is greater.

• €30 million or 6% of annual revenue, whichever is greater.

Under GDPR, what rights do individuals have regarding their personal data?

• The right to deny data collection for any reason.

• The right to access, delete, and transfer their data.

• The right to sell their data to third parties.

• The right to encrypt their data.

What is the time frame for notifying users and data controllers of a data breach under GDPR?

• 24 hours

• 48 hours

• 72 hours

• One week

What must companies do if their activities involve data processing or monitoring under GDPR?

• Notify the EU government.

• Delete all unnecessary data.

• Encrypt all data.

• Hire a data protection officer.

Which of the following is NOT a legacy data protection framework between the EU and the US?

• EU Data Protection Directive

• GDPR

• Privacy Shield

• Safe Harbor

What happened to the EU-US Privacy Shield framework?

• It is still in use today.

• It was merged with the GDPR.

• It was replaced by the Safe Harbor framework.

• It was declared invalid by the European Court of Justice.