The Planet 49 CJEU Judgement applies to?

1. A. Cookies used only by third parties.
2. B. Cookies that are deemed technically necessary.
3. C. Cookies regardless of whether the data accessed is personal or not.
4. D. Cookies where the data accessed is considered as personal data only.

Correct Answer: C

Which of the following is the weakest lawful basis for processing employee personal data?

1. A. Processing based on fulfilling an employment contract.
2. B. Processing based on employee consent.
3. C. Processing based on legitimate interests.
4. D. Processing based on legal obligation.

Correct Answer: B

In which of the following situations would an individual most likely to be able to withdraw her consent for processing?

1. A. When she is leaving her bank and moving to another bank.
2. B. When she has recently changed jobs and no longer works for the same company.
3. C. When she disagrees with a diagnosis her doctor has recorded on her records.
4. D. When she no longer wishes to be sent marketing materials from an organization.

Correct Answer: D

Tanya is the Data Protection Officer for Curtains Inc., a GDPR data controller. She has recommended that the company encrypt all personal data at rest. Which GDPR principle is she following?

1. A. Accuracy
2. B. Storage Limitation
3. C. Integrity and confidentiality
4. D. Lawfulness, fairness and transparency

Correct Answer: C

What must a data controller do in order to make personal data pseudonymous?

1. A. Separately hold any information that would allow linking the data to the data subject.
2. B. Encrypt the data in order to prevent any unauthorized access or modification.
3. C. Remove all indirect data identifiers and dispose of them securely.
4. D. Use the data only in aggregated form for research purposes.

Correct Answer: A