CSC - Cybersecurity Compliance GDPR Data Protection Principles Questions and Answers

Question 1

A financial services company collects client data to process loan applications.
The company later wants to use this same data for unsolicited marketing of third-party insurance products.
Which GDPR principle would this action most likely violate?

Accepted Answer

Purpose limitation

Answer

Data minimization

Answer

Storage limitation

Answer

Accuracy

Question 2

A new social media app requires users to provide their full name, date of birth, home address, and phone number just to create a basic profile and view public content. Which GDPR data protection principle is the app failing to adhere to?

Accepted Answer

Data minimization

Answer

Lawfulness, fairness, and transparency

Answer

Integrity and confidentiality

Answer

Accountability

Question 3

Which of the following is the BEST example of a company adhering to the GDPR's 'storage limitation' principle?

Accepted Answer

Anonymizing customer data after 5 years, when it is no longer needed for its original purpose.

Answer

Encrypting all archived customer data.

Answer

Backing up all customer data to a secure off-site location indefinitely.

Answer

Allowing customers to update their personal information via a self-service portal.

Question 4

Under the GDPR, the 'accountability' principle requires a data controller to do which of the following?

Accepted Answer

Be responsible for and able to demonstrate compliance with the GDPR principles.

Answer

Appoint a Data Protection Officer (DPO) for all processing activities.

Answer

Only process data with the explicit consent of the data subject.

Answer

Erase all personal data within 30 days of the data subject's request.

Question 5

A cybersecurity analyst discovers that customer support staff are using a shared spreadsheet on an unsecured, public cloud service to track sensitive customer issues, including names, contact details, and account numbers. This practice directly contravenes which GDPR principle?

Accepted Answer

Integrity and confidentiality

Answer

Purpose limitation

Answer

Data minimization

Answer

Accuracy

Question 6

Which set of actions best demonstrates a company's commitment to the principles of 'Lawfulness, fairness, and transparency'?

Accepted Answer

Providing a clear privacy notice explaining the legal basis for processing data and how it will be used, before collecting it.

Answer

Collecting only the absolute minimum data required and deleting it immediately after use.

Answer

Conducting regular data protection impact assessments and keeping detailed processing records.

Answer

Implementing multi-factor authentication and end-to-end encryption for all personal data.

A financial services company collects client data to process loan applications.The company later wants to use this same data for unsolicited marketing of third-party insurance products.Which GDPR principle would this action most likely violate?

A financial services company collects client data to process loan applications.
The company later wants to use this same data for unsolicited marketing of third-party insurance products.
Which GDPR principle would this action most likely violate?