PDP9 試験問題を無料オンラインアクセス

Which of the following is NOT a key requirement of independent supervisory authorities?

• A.Their leadership must change every four years
• B.They must operate independently.
• C.They must provide each other with mutual assistance
• D.They review DPIAs in cases of unmitigated high risk

Where a processor engages another processor ("sub-processor") to carry out processing activities on behalf of a controller, which of the following statements is CORRECT?

• A.The processor may use the sub-processor without the written authorisation of the controller if the sub-processor signs a contract which reflects the same obligations as the contract with the controller
• B.The processor must receive prior written authorisation to use the sub-processor
• C.The processor may use the sub-processor without the written authorisation of the controller if it adheres to an approved code of conduct
• D.The processor may use the sub-processor without the written authorisation of the controller if the processing is deemed to be low risk.

Of the following options which is NOT a purpose of carrying out a Data Protection Impact Assessment (DPIA)?

• A.It is necessary to fulfil the requirement that all DPIAs are submitted to the ICO
• B.It is key to the accountability element of the GDPR.
• C.It assists in identifying the main risks that may exist in any use of data, so that they can be mitigated
• D.It fulfils a requirement that data protection is carried out by design and default.

Which one task are supervisory authorities NOT required to carry out under Article 57(1 )(f) of the UK GDPR? Select the CORRECT answer.

• A.Investigate complaints and inform the complainant of the progress of their investigation
• B.Mediate between the complainant and the entity against which the complaint has been lodged, to resolve the complaint
• C.Handle complaints lodged by a data subject
• D.Co-ordinate where necessary with other supervisory authorities

What are Information Society Services'? Select the INCORRECT answer

• A.Business to business online networking sites
• B.A service provided for remuneration, by electronic means, at distance to an individual that has requested it.
• C.Information services provided by non-profit or government organisations with no remuneration
• D.An electronic information service provided to individuals but paid for solely by advertising