02 - GDPR

 1. GDPR stands for

  General Digital Policy Regulation

  Global Defense Product Research

  Government Department of Public Relations

  General Data Protection Regulation

 2. GDPR is designed to help people protect and control use of their personal data.



 3. Fill in the blanks.
Personal data covered by GDPR includes _________________.

  your name, identification number, location data or online identifier, and, under some circumstances, this can extend to images, and details about your family

  your name, email address, date of birth and passport number, bank details, social network posts, medical information and computer IP address - but nothing else

  your name, date of birth, and address - but nothing else

  anything and everything you define as being personal to you

 4. Fill in the blanks.
You have entered your personal data into an app for registration purposes. The app should not use this data without your consent for ____________.

  logging you into the app the next time you use it

  direct marketing about other products

  maintaining a database of users

  storing your password

 5. GDPR came into force in May 2018.



 6. GDPR applies to all departments within an organisation that have access to personal data.



 7. If an app wants to access your location and contacts, how should it work to comply with the GDPR?

  The app shows you a pre-ticked box saying you agree to its terms

  The app can access your location with your consent but not your contacts because they are someone else's personal data

  It happens automatically the first time you open the app

  The app explains how this data will be used and asks for your consent

 8. If your organisation does not comply with GDPR, what is the maximum penalty?

  1 million euros

  There is no penalty

  10 million euros or 10% of global annual turnover from the preceding financial year

  20 million euros or 4% of global annual turnover from the preceding financial year

 9. A subject access request can only be made via an email or a website.



 10. Fill in the blanks.
You were in an accident. Now you are unconscious and in need of a surgery. Your doctor can ____________________.

  disclose details if your next of kin agrees

  disclose nothing that you haven't already put in the public domain

  share details about your medical history only if they have your explicit consent

  share any details about your medical history they believe is necessary to save your life

 11. If someone follows a company on social media, the company can assume that they have consented to receiving promotional messages.



 12. What is a common name for 'special categories of data'?

  personal data

  sensitive data

  proprietary data

  confidential data

 13. Fill in the blanks.
In case of personal data breach, the data subject must be informed _________________.



  when requested by a supervisory authority

  when the breach is likely to result in a high risk to the freedoms and rights of one or more persons

 14. Consent for data collection, storing and use has to be:


  freely given, specific, informed and unambiguous


  in writing

 15. Pseudonymized data qualifies as personal data if not sufficiently anonymized.