CDPSE Subject Rights 3

Question 1

A data subject objects to their personal data being used for direct marketing. Under GDPR, what must the controller do?

Accepted Answer

Cease processing for direct marketing immediately and without exception

Answer

GDPR Article 21(3) states that when a data subject objects to direct marketing, the controller must stop processing for that purpose immediately with no balancing test.

Question 2

Under GDPR, what must accompany a decision made solely by automated processing that significantly affects a data subject?

Accepted Answer

The right to obtain human review, express their point of view, and contest the decision

Answer

GDPR Article 22 requires that data subjects have the right to human intervention, to express their view, and to contest automated decisions that significantly affect them.

Question 3

Which of the following is NOT a lawful basis for refusing a data subject access request under GDPR?

Accepted Answer

The data was collected from a third party

Answer

The origin of data from a third party is not a valid ground for refusing an access request; organizations must provide data regardless of its source.

Question 4

A data subject requests rectification of inaccurate data. What obligation does the controller have regarding third parties who received the incorrect data?

Accepted Answer

Inform each recipient of the rectification unless it is impossible or involves disproportionate effort

Answer

GDPR Article 19 requires controllers to notify all recipients of the corrected data unless doing so is impossible or involves disproportionate effort.

Question 5

Under the Virginia Consumer Data Protection Act (VCDPA), which right allows consumers to correct inaccuracies in their personal data?

Accepted Answer

Right to correct

Answer

The VCDPA grants consumers a right to correct inaccuracies in the personal data held by a controller.

CDPSE - Certified Data Privacy Solutions Engineer Practice Test

CDPSE - Certified Data Privacy Solutions Engineer Practice Test

CDPSE Subject Rights 3