CIPPE sam

更新时间：试题数量：购买人数：提供作者：

有效期：个月

章节介绍：共有个章节

收藏

我的练习

我的错题
(0道)

我的收藏
(0道)

我的斩题
(0道)

我的笔记
(0道)

专项练习

顺序练习 练习进度 0 / 0

随机练习 自定义设置练习量

模拟考试 仿真模拟

题型练习 按题型分类练习

易错题 精选高频易错题

学习资料 考试学习相关信息

搜索

题库预览

WP29's “Guidelines on Personal data breach notification under Regulation 2016/679” provides examples of ways to communicate data breaches transparently. Which of the following was listed as a method that would NOT be effective for communicating a breach to data subjects?

Which of the following describes a mandatory requirement for a group of undertakings that wants to appoint a single data protection officer?

An unforeseen power outage results in company Z's lack of access to customer data for six hours. According to article 32 of the GDPR, this is considered a breach.Based on the WP 29's February, 2018 guidance, company Z should do which of the following?

In addition to the European Commission,who can adopt standard contractual clauses, assuming that all required conditions are met?

Which of the following countries will continue to enjoy adequacy status under the GDPR, pending any future European Commission decision to the contrary?

The GDPR specifies fines that may be levied against data controllers for certain infringements. Which of the following infringements would be subject to the less severe administrative fine of up to 10 million euros (or in the case of an undertaking, up to 2% of the total worldwide annual turnover of the preceding financial year)?

What is the MAIN reason GDPR Article 4(22) establishes the concept of the “concerned supervisory authority”?

Read the following steps:

ØDiscover which employees are accessing cloud services and from which devices and apps Lock down the data in those apps and devices

ØMonitor and analyze the apps and devices for compliance

ØManage application life cycles

ØMonitor data sharing

An organization should perform these steps to do which of the following?

If a company is planning to use closed-circuit television (CCTV) on its premises and is concerned with GDPR compliance, it should first do all of the following EXCEPT?

In which of the following cases would an organization MOST LIKELY be required to follow both ePrivacy and data protection rules?

A mobile device application that uses cookies will be subject to the consent requirement of which of the following?

What term BEST describes the European model for data protection?

What is a reason the European Court of Justice declared the Data Retention Directive invalid in 2014?

Which of the following entities would most likely be exempt from complying with the GDPR?

When does the GDPR provide more latitude for a company to process data beyond its original collection purpose?

In which situation would a data controller most likely be able to justify the processing of the data of a child without parental consent?

According to the GDPR,when should the processing of photographs be considered processing of special categories of personal data?

The GDPR requires controllers to supply data subjects with detailed information about the processing of their data.Where a controller obtains data directly from data subjects,which of the following items of information does NOT legally have to be supplied?

Under Article 30 of the GDPR,controllers are required to keep records of all of the following EXCEPT?

Which mechanism,new to the GDPR,now allows for the possibility of personal data transfers to third countries under Article 42?