GDPR Specialist Compliance and Enforcement 2

Question 1

Under GDPR Article 83, what is the maximum administrative fine for a violation of the basic principles for processing personal data?

Accepted Answer

€20 million or 4% of global annual turnover

Answer

Violations of basic processing principles (Articles 5, 6, 7, 9) carry the highest tier fine: €20 million or 4% of total worldwide annual turnover, whichever is higher.

Question 2

A supervisory authority receives a complaint against a controller established in multiple EU Member States. Which authority has lead supervisory authority competence?

Accepted Answer

The authority where the controller has its main establishment

Answer

The lead supervisory authority is the authority in the Member State where the controller's main establishment is located, per GDPR Article 56.

Question 3

What must a controller demonstrate to prove compliance under GDPR's accountability principle?

Accepted Answer

That appropriate technical and organizational measures have been implemented and documented

Answer

Article 5(2) requires controllers to be able to demonstrate compliance through documented technical and organizational measures.

Question 4

An organization transfers personal data to a US-based processor. The processor has undergone an EU Standard Contractual Clause (SCC) agreement. What additional step is required post-Schrems II?

Accepted Answer

Conduct a Transfer Impact Assessment (TIA)

Answer

Following the Schrems II ruling, organizations must conduct a Transfer Impact Assessment to evaluate whether the destination country's law undermines the SCC protections.

Question 5

Under GDPR, which enforcement tool allows a supervisory authority to temporarily or permanently ban processing?

Accepted Answer

Corrective power under Article 58(2)(f)

Answer

Article 58(2)(f) grants supervisory authorities the corrective power to impose a temporary or permanent ban on processing.

(GDPR) Certified General Data Protection Regulation Specialist Practice Test

(GDPR) Certified General Data Protection Regulation Specialist Practice Test

GDPR Specialist Compliance and Enforcement 2