CIPM CIPM Data Subject Rights 2

Question 1

Under GDPR Article 17, which of the following would allow a data controller to REFUSE an erasure request?

Accepted Answer

The data is needed for exercising the right of legal defense

Answer

Under GDPR Article 17, data controllers may refuse erasure requests when the data is necessary for establishing, exercising, or defending legal claims.

Question 2

What is the primary purpose of a Data Subject Access Request (DSAR)?

Accepted Answer

To allow individuals to obtain a copy of their personal data

Answer

A DSAR enables individuals to obtain a copy of their personal data held by an organization and learn how it is being processed.

Question 3

Under GDPR, when may organizations charge a fee for responding to a data subject access request?

Accepted Answer

Only for requests that are manifestly unfounded or excessive

Answer

GDPR allows organizations to charge a reasonable fee or refuse to act on requests that are manifestly unfounded or excessive, particularly repetitive ones.

Question 4

Which GDPR right enables data subjects to challenge decisions made solely by automated processing that significantly affects them?

Accepted Answer

Right not to be subject to automated decision-making

Answer

GDPR Article 22 provides data subjects the right to not be subject to solely automated decisions that significantly affect them, including profiling.

Question 5

Which of the following must be provided when responding to a data subject access request?

Accepted Answer

The purposes of processing and categories of recipients

Answer

DSARs must be fulfilled with information including the purposes of processing, categories of data held, and recipients or categories of recipients.

CIPM - Certified Information Privacy Manager Practice Test

CIPM - Certified Information Privacy Manager Practice Test

CIPM CIPM Data Subject Rights 2