CSC GDPR Data Protection Principles 3

Question 1

GDPR's lawfulness principle lists six lawful bases for processing. Which of the following is NOT one of them?

Accepted Answer

Competitive business advantage

Answer

Competitive business advantage is not a lawful basis; the six bases are consent, contract, legal obligation, vital interests, public task, and legitimate interests.

Question 2

When processing is based on 'legitimate interests,' controllers must perform a balancing test. What is the primary factor assessed?

Accepted Answer

Whether the data subject's interests or fundamental rights override the controller's interests

Answer

The legitimate interests balancing test weighs the controller's interest against whether data subjects' rights and freedoms override it, especially for vulnerable individuals.

Question 3

Under GDPR, consent must meet several conditions to be valid. Which condition below is required?

Accepted Answer

Consent must be freely given, specific, informed, and unambiguous

Answer

Valid GDPR consent must be freely given, specific, informed, and indicated by a clear affirmative act; pre-ticked boxes and implied consent are invalid.

Question 4

A controller relies on legal obligation as the lawful basis for processing employee tax data. What does this mean for the employee's right to erasure?

Accepted Answer

The right to erasure does not apply where processing is necessary to comply with a legal obligation

Answer

The right to erasure does not apply when processing is necessary for compliance with a legal obligation, such as mandatory tax record-keeping.

Question 5

Which GDPR principle is sometimes called the 'overarching' principle because it requires controllers to take responsibility for and demonstrate compliance with all other principles?

Accepted Answer

Accountability

Answer

Accountability is the overarching principle that obliges controllers to implement appropriate measures and be able to demonstrate compliance with all other GDPR principles.

(CSC) Cybersecurity Compliance Certification Practice Test

(CSC) Cybersecurity Compliance Certification Practice Test

CSC GDPR Data Protection Principles 3