Who has rulemaking authority for the Fair Credit Reporting Act (FCRA) and the Fair and Accurate Credit Transactions Act (FACTA)?

• A.The Federal Trade Commission
• B.The Consumer Financial Protection Bureau
• C.The Department of Commerce
• D.State Attorneys General

Comment: *

Name: *

Email: *

Verification: *

Which of the following is NOT a role of works councils?

• A.Determining what changes will affect employee working conditions.
• B.Determining whether to approve or reject certain decisions of the employer that affect employees.
• C.Determining the monetary fines to be levied against employers for data breach violations of employee data.
• D.Determining whether employees' personal data can be processed or not.

Comment: *

Name: *

Email: *

Verification: *

What is the consequence if a processor makes an independent decision regarding the purposes and means of processing it carries out on behalf of a controller?

• A.The controller will be liable to pay an administrative fine
• B.The processor will be liable to pay compensation to affected data subjects
• C.The processor will be considered to be a controller in respect of the processing concerned
• D.The controller will be required to demonstrate that the unauthorized processing negatively affected one or more of the parties involved

Comment: *

Name: *

Email: *

Verification: *

Which of the following does NOT have to be included in the records most processors must maintain in relation to their data processing activities?

• A.Details of any data protection impact assessment conducted in relation to any processing activities carried out by the processor on behalf of each controller for which the processor is acting.
• B.Categories of processing carried out on behalf of each controller for which the processor is acting.
• C.Details of transfers of personal data to a third country carried out on behalf of each controller for which the processor is acting.
• D.Name and contact details of each controller on behalf of which the processor is acting.

Comment: *

Name: *

Email: *

Verification: *

According to Article 14 of the GDPR, how long does a controller have to provide a data subject with necessary privacy information, if that subject's personal data has been obtained from other sources?

• A.As soon as possible after obtaining the personal data.
• B.Within a reasonable period after obtaining the personal data, but no later than one month.
• C.Within a reasonable period after obtaining the personal data, but no later than eight weeks.
• D.As soon as possible after the first communication with the data subject.

Comment: *

Name: *

Email: *

Verification: *