Accountability module test

Question 1 of 11

1. Question

Principle two says that you may only collect personal data for specified, explicit and legitimate purposes. What does this mean?

You can use personal data for any task you want as long as the task requires it.
You cannot collect personal data unless you tell the data subject why you are collecting it.
You can only use personal data for the tasks you specified when collecting it.
Consent is not needed to collect and use personal data as long as you specify the tasks you need it for.

Question 2 of 11

2. Question

Data subjects have certain rights regarding data protection under GDPR. Which right does this action address? Determine the required format and provide the data subject with copy of their personal data.

The right to rectification.
The right to be informed.
The right to data portability.
The right of access.

Question 3 of 11

3. Question

Under GDPR can you share an adult data subject’s personal data with a relative of theirs?

You may only share personal data that can indirectly identify the data subject.
You may only share personal data that is not classified as sensitive with a relative.
You are not permitted to share any personal data with a relative.
As the relative is related to the data subject you can share personal data with the person.

Question 4 of 11

4. Question

One of the principles of GDPR says that personal data must be kept accurate and up to date. What does this mean?

You must update any information that is found to be inaccurate.
You must provide a data subject with a copy of the data you hold on them every year.
You must obtain consent for the data you hold every six months.
You must take reasonable steps to ensure the accuracy of the data.
You must follow up, with the data subject, to ensure accuracy, at least once a month.

Question 5 of 11

5. Question

What format should copies of personal data be provided to a data subject in?

PDF only.
A format usable by the data subject.
Personal data should be printed and delivered to the data subject.
Access to their data should only be provided through a secure web portal.

Question 6 of 11

6. Question

A data subject is:

Any individual or entity about whom data is held.
An organisation about which data is held.
A natural person about whom data is held.
An EU individual or natural person about whom data is held.

Question 7 of 11

7. Question

Can I share a data subjects’ personal data within my organisation?

Any personal data can be shared within your organisation.
No personal data can be shared within your organisation.
Only if the personal data has been collected for carrying out the particular task it is being shared for.
Only personal data that has not been classified as sensitive may be shared within your organisation.

Question 8 of 11

8. Question

A data protection officer is:

A person responsible for collecting the personal data for the data controller.
A person appointed by the Information Commissioner to monitor the application of the GDPR in your business.
A person responsible for securely storing any personal data collected by the data controller.
A person appointed by your business to monitor application of the GDPR and ensure compliance.

Question 9 of 11

9. Question

Data subjects have certain rights under GDPR. Which right does this action protect: Ensure transparency when collecting personal data so that the data subjects are aware of how you intend to use their data.

The right to object.
The right to appropriate decision making.
The right of access.
The right to be informed.

Question 10 of 11

10. Question

You work for the US subsidiary of a drug company that is headquartered within the EU. You are processing an order for a vet in Australia. Is this transaction within the scope of GDPR and are you required to comply with its regulations when processing the order?

Yes
No

Question 11 of 11

11. Question

You work in the marketing department for ExcellentVet a five location practice based in Birmingham with branches in Solihull, Coventry, Tamworth & Walsall. Your role is to gather customer data for analysis in order to inform key business decisions. Your practice has just employed Roger Relevant, A GDPR expert, to ensure that ExcellentVet complies with the GDPR. As a result you have been asked to work with Roger to assess the current process around the collection of data and put in place any relevant protection measures. Who is the data controller?

ExcellentVet
ExcellentVet's Clients
You
Roger Relevant