stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
GDPR - Connect Flashcards | StudBud
Explore
/
GDPR - Connect
What is the main purpose of GDPR?
What is a Data Controller?
GDPR - Connect
21 terms
·
StudBud Administration
·
5 plays
Imported from external platform
Flashcards
21 cards
F
Practice quiz
P
Host live
L
Questions
21
Answers
1
What is a Data Controller?
A GDPR compliance officer
A company that processes data on behalf of another
A person who decides how personal data is used
A software for managing data
2
What is the main purpose of GDPR?
To generate government revenue
To restrict internet usage
To promote digital marketing
To protect personal data and privacy
3
What is NOT a legal basis for processing personal data under GDPR?
Personal interest
Consent
Contractual necessity
Legitimate interest
4
Which entity enforces GDPR compliance?
Local police departments
The European Parliament
National Data Protection Authorities (DPAs)
The United Nations
5
How long does a company have to report a data breach?
24 hours
30 days
72 hours
7 days
6
What should companies do in case of a data breach?
Hide it from the public
Ignore it if no harm is done
Report it to authorities within 72 hours
Sell the data to third parties
7
What is the maximum fine for GDPR non-compliance?
4% of annual global turnover or €20 million
€100,000
2% of annual global turnover or €10 million
€1 million
8
How must consent be obtained under GDPR?
Through pre-checked boxes
Through clear and affirmative action
Automatically upon website visit
Only in writing
9
What is a Data Subject Access Request (DSAR)?
A request to access personal data held by a company
A request to delete all company data
A report on cybersecurity threats
A company’s marketing report
10
What is considered personal data under GDPR?
All of the above
Medical records
Name and email address
IP address
11
Who is responsible for ensuring GDPR compliance in an organization?
The HR Department
The Marketing Team
The CEO
The Data Protection Officer (DPO)
12
What does GDPR stand for?
General Digital Protection Rights
General Data Privacy Regulation
Global Data Privacy Rules
General Data Protection Regulation
13
GDPR applies to:
Only large corporations
Only EU companies
Any company handling EU citizens' data
Only tech companies
14
What does ‘right to be forgotten’ mean?
Companies must delete personal data upon request
People can erase their digital identity
Users can reset their passwords
Companies must forget customers after one year
15
GDPR applies to:
Only businesses handling financial data
Only government agencies
Only businesses in the EU
Any company processing EU residents’ data, regardless of location
16
What is a Data Processor under GDPR?
company / person that process personal data on behalf of a Data Controller
A person who decides why and how personal data is used
A software used to analyze personal data
A government agency overseeing GDPR compliance
17
When did GDPR come into effect?
25th May 2018
1st January 2018
31st December 2017
1st July 2019
18
Can companies transfer personal data outside the EU under GDPR?
Yes, with adequate safeguards
Only if the customer signs a waiver
Only if they delete the data first
No, it is strictly forbidden
19
What rights does GDPR give to individuals?
Right to object to processing
Right to access their data
Right to correct their data
All of the above
20
What does ‘privacy by design’ mean?
Only collecting data when necessary
Ensuring privacy settings are enabled by default
Both A and C
Creating privacy-themed websites
21
What must be included in a privacy policy under GDPR?
What data is collected and why
How long the data is stored
Contact details of the company
All of the above
