MEC Regulatory Compliance & Legal Framework 3

Question 1

A UK university uses Moodle and must comply with GDPR. Which legal basis is most commonly relied upon for processing student personal data for course administration?

Accepted Answer

Contractual necessity

Answer

Processing student data for course administration is typically justified under contractual necessity because enrollment creates a contract between student and institution.

Question 2

Under GDPR, what is the maximum timeframe within which a data controller must notify the supervisory authority of a personal data breach that poses a risk to individuals?

Accepted Answer

72 hours

Answer

GDPR Article 33 requires notification to the supervisory authority within 72 hours of becoming aware of a personal data breach, where feasible.

Question 3

A Moodle administrator receives a GDPR 'right to erasure' request from a former student. Which scenario would most likely justify refusing the request?

Accepted Answer

The institution needs the records to comply with a legal obligation to retain data

Answer

Article 17(3)(b) GDPR allows controllers to refuse erasure when processing is necessary for compliance with a legal obligation requiring retention.

Question 4

Which Creative Commons license allows others to distribute, remix, and adapt content for any purpose, including commercially, as long as they credit the original creator?

Accepted Answer

CC BY

Answer

CC BY (Attribution) is the most permissive Creative Commons license, allowing any use including commercial, provided appropriate credit is given.

Question 5

In US higher education, Title IX primarily protects students from discrimination based on which characteristic within federally funded programs?

Accepted Answer

Sex

Answer

Title IX of the Education Amendments of 1972 prohibits discrimination on the basis of sex in any federally funded education program or activity.

(MEC) Moodle Educator Certification Practice Test

(MEC) Moodle Educator Certification Practice Test

MEC Regulatory Compliance & Legal Framework 3