CIPP-E Free Practice Test

According to Article 84 of the GDPR, the rules on penalties applicable to infringements shall be laid down by?

1. A. The local Data Protection Supervisory Authorities.
2. B. The European Data Protection Board.
3. C. The EU Commission.
4. D. The Member States.

Correct Answer: D

The GDPR forbids the practice of “forum shopping”, which occurs when companies do what?

1. A. Choose the data protection officer that is most sympathetic to their business concerns.
2. B. Designate their main establishment in member state with the most flexible practices.
3. C. File appeals of infringement judgments with more than one EU institution simultaneously.
4. D. Select third-party processors on the basis of cost rather than quality of privacy protection.

Correct Answer: B

What is an important difference between the European Court of Human Rights (ECHR) and the Court of Justice of the European Union (CJEU) in relation to their roles and functions?

1. A. ECHR can rule on issues concerning privacy as a fundamental right, while the CJEU cannot.
2. B. CJEU can force national governments to implement and honor EU law, while the ECHR cannot.
3. C. CJEU can hear appeals on human rights decisions made by national courts, while the ECHR cannot.
4. D. ECHR can enforce human rights laws against governments that fail to implement them, while the CJEU cannot.

Correct Answer: B

How does the GDPR now define “processing”?

1. A. Any act involving the collecting and recording of personal data.
2. B. Any operation or set of operations performed on personal data or on sets of personal data.
3. C. Any use or disclosure of personal data compatible with the purpose for which the data was collected.
4. D. Any operation or set of operations performed by automated means on personal data or on sets of personal data.

Correct Answer: A

When would a data subject NOT be able to exercise the right to portability?

1. A. When the processing is necessary to perform a task in the exercise of authority vested in the controller.
2. B. When the processing is carried out pursuant to a contract with the data subject.
3. C. When the data was supplied to the controller by the data subject.
4. D. When the processing is based on consent.

Correct Answer: A