RCMS Data Privacy & Protection Compliance 5

Question 1

A company appoints a Data Protection Officer (DPO) under GDPR. Which of the following tasks falls OUTSIDE the DPO's role?

Accepted Answer

Making final decisions on data processing legal bases

Answer

The DPO advises and monitors but does not make binding decisions on legal bases; that responsibility rests with the controller or processor.

Question 2

Under the GLBA Safeguards Rule (updated 2023), covered financial institutions must designate a qualified individual to oversee their information security program. This person is commonly referred to as a:

Accepted Answer

Chief Information Security Officer (CISO) or equivalent

Answer

The FTC's updated Safeguards Rule requires a qualified individual — often a CISO or equivalent — to implement and supervise the information security program.

Question 3

Which scenario represents a violation of the 'data minimization' principle under GDPR?

Accepted Answer

Requiring users to submit their Social Security Number to create a free loyalty account

Answer

Collecting a Social Security Number for a loyalty account exceeds what is adequate, relevant, and limited to what is necessary for that purpose.

Question 4

A data subject submits a Subject Access Request (SAR) under GDPR. The controller may extend the response period from one month to three months if:

Accepted Answer

The request is complex or the controller receives a high number of requests

Answer

GDPR Article 12(3) allows an extension of up to two additional months where requests are complex or numerous, provided the data subject is informed within the first month.

Question 5

What does the principle of 'accountability' under GDPR primarily require of a data controller?

Accepted Answer

Being able to demonstrate compliance with GDPR principles through documented measures

Answer

Article 5(2) places the burden on the controller to demonstrate compliance with GDPR principles through records, policies, and other documented measures.

(RCMS) Registered Compliance Management Specialist Certification Practice Test

(RCMS) Registered Compliance Management Specialist Certification Practice Test

RCMS Data Privacy & Protection Compliance 5