GDPR Specialist Rights of Data Subjects 2

Question 1

Under GDPR Article 17, which of the following is NOT a valid ground for the right to erasure ('right to be forgotten')?

Accepted Answer

The data subject simply prefers their data not be stored any longer without other grounds

Answer

The right to erasure requires specific grounds under Article 17; a mere preference without a qualifying ground is insufficient.

Question 2

A data subject requests restriction of processing under Article 18 GDPR. During the restriction period, the controller may still process the data in which circumstance?

Accepted Answer

With the data subject's consent or to establish, exercise, or defend legal claims

Answer

Article 18(2) allows processing during restriction only with consent or for legal claims, protecting vital interests, or public interest grounds.

Question 3

Which GDPR article governs the right to data portability, and to whom does it apply?

Accepted Answer

Article 20 — applies only when processing is based on consent or a contract

Answer

Article 20 GDPR grants portability rights only when processing relies on consent (Article 6(1)(a)) or a contract (Article 6(1)(b)).

Question 4

A data subject exercises their right to object under Article 21(1) GDPR to processing based on legitimate interests. What must the controller demonstrate to continue processing?

Accepted Answer

Compelling legitimate grounds that override the data subject's interests, rights, and freedoms

Answer

Under Article 21(1), the controller may override an objection only by demonstrating compelling legitimate grounds that prevail over those of the data subject.

Question 5

Under GDPR, how must a controller respond to a right-of-access request when a large volume of information is involved?

Accepted Answer

The controller may ask the data subject to specify which information or processing activities they are concerned with

Answer

Recital 63 GDPR allows controllers to request that data subjects narrow their request when a large amount of information is held about them.

(GDPR) Certified General Data Protection Regulation Specialist Practice Test

(GDPR) Certified General Data Protection Regulation Specialist Practice Test

GDPR Specialist Rights of Data Subjects 2