Data Processing Data Security and Privacy 2

Question 1

What does GDPR stand for?

Accepted Answer

General Data Protection Regulation

Answer

Global Data Privacy Requirements

Answer

Government Data Processing Rules

Answer

General Database Protection Rights

Question 2

Which of the following best describes personally identifiable information (PII)?

Accepted Answer

Any data that can be used to identify a specific individual

Answer

Data stored on personal computers and mobile devices

Answer

Encrypted data belonging to registered users

Answer

Information accessed using personal login credentials

Question 3

What is data anonymization?

Accepted Answer

Removing or altering personally identifiable information so individuals cannot be identified

Answer

Encrypting data with an anonymous key pair for secure transmission

Answer

Storing data without assigning ownership or metadata attributes

Answer

Routing data through anonymous network proxies for privacy

Question 4

Under HIPAA, what category of information is protected?

Accepted Answer

Health information that can be linked to a specific individual

Answer

All financial data belonging to healthcare organizations

Answer

Research data published in peer-reviewed medical journals

Answer

General healthcare statistics and aggregate demographic data

Question 5

What is the primary purpose of a privacy policy?

Accepted Answer

To inform users how their personal data will be collected, used, and protected

Answer

To restrict employee access to internal company systems and networks

Answer

To define the technical security measures used to protect databases

Answer

To establish legal penalties for unauthorized data access incidents

Question 6

What does data sovereignty mean?

Accepted Answer

Data is subject to the laws and regulations of the country where it is stored

Answer

An individual's right to own and control their personal information

Answer

A company's exclusive ownership of all data its systems generate

Answer

Government agencies have priority access to all citizen-generated data

Question 7

What does the GDPR 'right to erasure' (right to be forgotten) allow individuals to do?

Accepted Answer

Request that an organization permanently delete their personal data

Answer

Require companies to erase data after a government-mandated retention period

Answer

Hide browsing history and online activity from third parties

Answer

Force organizations to delete all backups when a user closes their account