Practitioner Certificate in Data Protection Personal Practice Questions

A company wants to process personal data for marketing purposes. What must they do first?

• AA. Store the data securely
• BB. Delete the data
• CC. Obtain consent
• DD. Anonymize the data

A user requests access to their personal data. What is the maximum time frame a company has to respond?

• AA. 1 month
• BB. 3 months
• CC. 2 weeks
• DD. 1 week

An employee accidentally sends personal data to the wrong email address. What should be their immediate action?

• AA. Ignore the incident
• BB. Wait for a response
• CC. Notify the data controller
• DD. Delete the email

A data processor fails to secure personal data. Who is primarily responsible for the breach?

• AA. The data controller
• BB. The individual
• CC. The data processor
• DD. Both A and B

A company wishes to share personal data with a third party. What must they ensure beforehand?

• AA. Data is collected legally
• BB. A data sharing agreement
• CC. Data is encrypted
• DD. The third party is known

An organization wishes to transfer personal data outside the EU. What must they ensure?

• AA. That the receiving party is known
• BB. That the new country has no laws
• CC. That adequate protection is in place
• DD. That the country is wealthy