stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
GDPR Quiz Flashcards | StudBud
Explore
/
GDPR Quiz
GDPR Quiz
12 terms
·
StudBud Administration
·
429 plays
Test your knowledge of the GDPR
Flashcards
12 cards
F
Practice quiz
P
Host live
L
Questions
12
Answers
1
Which of the following data does not fall under Personal Data according to the GDPR?
Merck User ID (e.g. MUID 123456)
Date of birth
Car number plates (e.g. DA-EM 123)
2
When must a Privacy Impact Assessment (PIA) performed?
When high risks to privacy rights of individuals is likely
Only if processing sensitive data (e.g. health data)
For every data processing activity under GDPR
3
To whom applies the new GDPR?
Companies within the EU & outside but targeting EU citizens
Only organisationsprocessing personal data of EU citizens
Only organisations established in the EU
4
In what period of time a data breach must be reported?
Without undue delay
Within 72 hours
Within 36 Hours
5
What data processing activities must be registered at Merck`s Group Data Privacy Register?
Only IT-projects
Only processings including personal data
All data processing activity shall be registered
6
What is the maximum fine for a GDPR breach?
There is no maximum fine
€20,000,000 or up to 4% of annual turnover
€10,000,000 or up to 2% of annual turnover
7
How many requirements must be met for a valid Consent declaration under the GDPR?
6
5
4
8
How many items must be included in a Data Privacy Notice, when collecting personal data?
5
7
6
9
A Data Protection Officer (DPO) must be appointed:
Only in limited cases defined by the GDPR
Only if sensitive data relating to EU citizens are involved
In all cases, regardless of the levels of data processing
10
Merck has “Intercompany Agreements” in place. Am I allowed to share any data within Merck?
Yes
Only data of Merck employees within the matrix organisation
No
11
Test: What is the capital city of Germany?
Frankfurt
Berlin
Bonn
12
What is the difference between anonymization and pseudonymization?
Only anonymization fully destructs identifiable data
Both will de-identify data so that GDPR is not applicable
Anonymization and Pseudonymization are all synonyms
