WordPress Regulatory Frameworks & Compliance 5

Question 1

When a WordPress site suffers a data breach exposing EU residents' personal data, within how many hours must the data controller notify the relevant supervisory authority under GDPR?

Accepted Answer

72 hours

Answer

GDPR Article 33 requires data controllers to notify the relevant supervisory authority of a personal data breach within 72 hours of becoming aware of it.

Question 2

Under GDPR, what is a 'legitimate interest' as a legal basis for processing personal data on a WordPress site?

Accepted Answer

A genuine interest that is necessary and proportionate, not overridden by the individual's rights

Answer

Legitimate interest requires a real and present business need that is proportionate and does not override the data subject's rights and freedoms.

Question 3

Which of the following is a requirement of the GDPR's 'Privacy by Design' principle when building a new WordPress plugin?

Accepted Answer

Integrating data protection measures into the system architecture from the start

Answer

Privacy by Design requires that data protection be embedded into the design and architecture of systems and business practices from the outset, not added later.

Question 4

A WordPress e-commerce site targeting Canadian customers must comply with which Canadian privacy legislation regarding personal data collection?

Accepted Answer

PIPEDA (now superseded by Bill C-27/CPPA)

Answer

PIPEDA (Personal Information Protection and Electronic Documents Act), currently being replaced by Bill C-27, governs how private-sector organizations in Canada collect, use, and disclose personal information.

Question 5

What does 'pseudonymization' mean in the context of GDPR compliance for a WordPress database?

Accepted Answer

Replacing directly identifying information with artificial identifiers so data cannot be attributed to a specific person without additional information

Answer

Pseudonymization replaces identifying fields with artificial identifiers, reducing privacy risk while the additional key needed for re-identification is stored separately.

WordPress Practice Test

WordPress Practice Test

WordPress Regulatory Frameworks & Compliance 5