Free BCS PDP9 Exam Dumps Questions & Answers

In the terms of their relevance under data protection legislation, how can CCTV images recorded in a supermarket BEST be described'?

• A.They are biometric data in the terms of the definition stipulated in the GDPR.
• B.The GDPR is only engaged where these are accompanied by text or other identifier
• C.They are personal data as they can be used to identify living human beings
• D.They are special category data as they identify special characteristics

An individual applies for a job as a security guard The employer has had significant issues with the sickness record of past recruits They therefore decide to offer the position to the individual on the basis they request a copy of their medical record so that the employer can be assured that they are in a good state of health.
The Data Protection Officer has been asked to advise. What advice is MOST appropriate?

• A.While requesting and viewing medical evidence may be legitimate, they should ask for evidence that the individual consents to the proposition that they make the request
• B.This is a criminal offence under the Data Protection Act 2018 No individual should be asked to make a subject access request in order to obtain health records in these circumstances.
• C.Providing the medical evidence is used for a legitimate purpose, and that the information is securely destroyed on verification that the employee is healthy, this is an acceptable action.
• D.In requesting information that is more than they necessary require to verify the medical condition of the individual they will have breached the data minimisation principle

A privacy notice MUST NOT contain

• A.The contact details of the controller
• B.Details of the right to lodge a complaint with the supervisory authority
• C.The purpose of the processing
• D.Details of the processor's staff

A UK public body has a security breach, in which the details of a hundred thousand members of the public are published What is the MAXIMUM fine that they could receive for this breach?

• A.£17 5 million or 4% of gross annual turnover
• B.£20 million or 2% of gross annual turnover
• C.£8.7 million or 2% of gross annual turnover
• D.£10 million or 4% of gross annual turnover

Which of the following is NOT a processor obligation?

• A.To follow the instructions of the controller in processing personal data
• B.To inform the controller of any intended changes of other processors so they can object
• C.To provide the controller with corporate information relating to its board members.
• D.To consult the controller prior to appointing any processor.