Under Article 80(1) of the GDPR, individuals can elect to be represented by not-for-profit organizations in a privacy group litigation or class action. These organizations are commonly known as?

1. A. Law firm organizations.
2. B. Civil society organizations.
3. C. Human rights organizations.
4. D. Constitutional rights organizations.

Correct Answer: A

A U.S. company’s website sells widgets. Which of the following factors would NOT in itself subject the company to the GDPR?

1. A. The widgets are offered in EU and priced in euro.
2. B. The website is in English and French, and is accessible in France.
3. C. An affiliate office is located in France but the processing is in the U.S.
4. D. The website places cookies to monitor the EU website user behavior.

Correct Answer: B

What is true if an employee makes an access request to his employer for any personal data held about him?

1. A. The employer can automatically decline the request if it contains personal data about a third person.
2. B. The employer can decline the request if the information is only held electronically.
3. C. The employer must supply all the information held about the employee.
4. D. The employer must supply any information held about an employee unless an exemption applies.

Correct Answer: D

If a French controller has a car-sharing app available only in Morocco, Algeria and Tunisia, but the data processing activities are carried out by the appointed processor in Spain, the GDPR will apply to the processing of the personal data so long as?

1. A. The individuals are European citizens or residents.
2. B. The data processing activities are in Spain.
3. C. The data controller is in France.
4. D. The EU individuals are targeted.

Correct Answer: D

Which of the following was the first to implement national law for data protection in 1973?

1. A. France
2. B. Sweden
3. C. Germany
4. D. United Kingdom

Correct Answer: B