GDPR Specialist Principles and Concepts 2

Question 1

Under GDPR, what is the maximum timeframe for notifying a supervisory authority after discovering a personal data breach that poses a risk to individuals?

Accepted Answer

72 hours

Answer

Article 33 requires notification to the supervisory authority within 72 hours of becoming aware of a personal data breach, where feasible.

Question 2

Which GDPR principle requires that personal data be collected only for specified, explicit, and legitimate purposes and not further processed in a manner incompatible with those purposes?

Accepted Answer

Purpose limitation

Answer

The purpose limitation principle in Article 5(1)(b) restricts the use of personal data to the specific purposes for which it was originally collected.

Question 3

A company transfers EU resident data to a US-based cloud provider. Under GDPR, which mechanism could NOT independently serve as a valid transfer safeguard after Schrems II?

Accepted Answer

EU-US Privacy Shield

Answer

The Court of Justice of the EU invalidated the Privacy Shield in the Schrems II ruling (C-311/18, 2020), making it no longer a valid transfer mechanism.

Question 4

Under GDPR's accountability principle, which document must a controller with 250 or more employees maintain?

Accepted Answer

Records of Processing Activities

Answer

Article 30 requires controllers with 250+ employees (and those meeting other thresholds) to maintain Records of Processing Activities (RoPA).

Question 5

What distinguishes 'pseudonymisation' from 'anonymisation' under GDPR?

Accepted Answer

Pseudonymised data can be re-identified with additional information; anonymised data cannot

Answer

Pseudonymised data still allows re-identification using separately held additional information, so it remains personal data under GDPR, while truly anonymised data does not.

(GDPR) Certified General Data Protection Regulation Specialist Practice Test

(GDPR) Certified General Data Protection Regulation Specialist Practice Test

GDPR Specialist Principles and Concepts 2