CSC GDPR Data Protection Principles 2

Question 1

Under GDPR's storage limitation principle, personal data must be kept in a form that permits identification of data subjects for no longer than:

Accepted Answer

No longer than is necessary for the purposes for which it is processed

Answer

The storage limitation principle requires that personal data is kept only as long as necessary for its specified purpose, after which it must be deleted or anonymized.

Question 2

A healthcare provider collects patient data for treatment but later wants to use it for marketing. Under GDPR's purpose limitation principle, this secondary use is:

Accepted Answer

Permitted only with a new explicit consent from patients

Answer

Purpose limitation prohibits using data for incompatible secondary purposes; marketing is incompatible with treatment, so fresh explicit consent is required.

Question 3

Which GDPR principle requires that personal data must be accurate and, where necessary, kept up to date?

Accepted Answer

Accuracy

Answer

The accuracy principle mandates that inaccurate personal data must be erased or rectified without delay.

Question 4

An e-commerce site collects a customer's full medical history during checkout 'just in case it's useful later.' Which GDPR principle is most directly violated?

Accepted Answer

Data minimisation

Answer

Data minimisation requires that only data adequate, relevant, and limited to what is necessary for the specified purpose is collected.

Question 5

The GDPR principle of 'integrity and confidentiality' most directly requires controllers to:

Accepted Answer

Ensure data is processed using appropriate technical and organisational security measures

Answer

Integrity and confidentiality (security principle) mandates appropriate technical and organisational measures to protect data against unauthorised access, loss, or destruction.

(CSC) Cybersecurity Compliance Certification Practice Test

(CSC) Cybersecurity Compliance Certification Practice Test

CSC GDPR Data Protection Principles 2