Team Training Course

Question 1 of 17

1. Question

A data subject is:

An identifiable natural living person about whom data is held
An animal about whom data is held
An identifiable deceased person about whom data is held
All of the above

Question 2 of 17

2. Question

Is the employee data processed by your practice covered by GDPR?

Yes
No

Question 3 of 17

3. Question

What size companies are affected by GDPR?

1-20 employees
21-250 employees
Over 250 employees
All companies

Question 4 of 17

4. Question

Who within a company is responsible for protecting personal data?

The Directors
The Data Protection Manager
The employees
All of the above

Question 5 of 17

5. Question

Which information is NOT classed as personal data under GDPR?

CCTV footage (security video recordings)
Animal name and treatment information
Employee surname and address
Full client bank account details

Question 6 of 17

6. Question

Is your practice a Data Controller?

Yes
No

Question 7 of 17

7. Question

When a new client registers with your practice, what information should they be made aware of and have access to regarding how the practice will process their personal data?

A welcome letter
Terms and conditions
A privacy notice
Opening and closing times

Question 8 of 17

8. Question

Which of the following is NOT a Data Processor for your practice?

Practice management system (PMS) provider
Vaccination reminders provider
Specialist veterinary practice that your practice refers clients to
Accountants that process payroll

Question 9 of 17

9. Question

Data subjects have certain rights under GDPR. Which right does this action protect: A client no longer wants to receive marketing communications from your practice and opts out of their data being used for this purpose.

The right to object
The right to be informed
The right to access
The right to erasure

Question 10 of 17

10. Question

When a client makes a subject access request (SAR), how long does the practice have to respond?

48 hours
1 month
40 days
5 business days

Question 11 of 17

11. Question

If you accidentally sent a client another client’s personal information, would this be classed as a ‘data breach’?

Yes
No

Question 12 of 17

12. Question

Which legal basis should be used by your practice when you transfer a client’s personal data to another veterinary practice?

Legitimate interests
Contract
Vital interests
Consent

Question 13 of 17

13. Question

If a client asks you to delete all their data under their right to erasure, should you do that right away?

Yes
No

Question 14 of 17

14. Question

Does a veterinary practice have to use Consent to be able to send marketing communications to clients?

Yes
No

Question 15 of 17

15. Question

Which is a good example of data security and protecting data?

Storing employee records in an unlocked filing cabinet in the office
Leaving the back door to the practice back of house areas unlocked
Writing client credit card details on a slip of paper for processing later
Logging out of the PMS when leaving a client unattended in the consulting room

Question 16 of 17

16. Question

Data subjects have certain rights under GDPR. Which right does this action protect: A client asks you to send their records to a new veterinary practice that has just opened.

The right to be informed
The right to access
The right to data portability
The right to erasure

Question 17 of 17

17. Question

Which is NOT a good example of data security and protecting personal data?

Ensuring each team member only uses their own log-in details when using the practice computer systems
The computer screens in reception can easily be read by clients when at the reception desk
Hard copies of client and employee personal data is kept to a minimum and stored in locked filing cabinets
The practice team discusses data security regularly at team meetings with the aim of improving practice procedures