What must be included in a written agreement between the controller and processor in relation to processing conducted on the controller's behalf?

• A.An obligation on the processor to report any personal data breach to the controller within 72 hours.
• B.An obligation on both parties to agree to a termination of the agreement if the other party is responsible for a personal data breach.
• C.An obligation on the processor to assist the controller in complying with the controller's obligations to notify the supervisory authority about personal data breaches.
• D.An obligation on both parties to report any serious personal data breach to the supervisory authority.

Comment: *

Name: *

Email: *

Verification: *

A Spanish electricity customer calls her local supplier with Questions: about the company's upcoming merger.
Specifically, the customer wants to know the recipients to whom her personal data will be disclosed once the merger is final. According to Article 13 of the GDPR, what must the company do before providing the customer with the requested information?

• A.Verify that the identity of the customer can be proven by other means.
• B.Verify that the request is applicable to the data collected before the GDPR entered into force.
• C.Verify that the purpose of the request from the customer is in line with the GDPR.
• D.Verify that the personal data has not already been sent to the customer.

Comment: *

Name: *

Email: *

Verification: *

The rules for "e-discovery" mainly prevent which of the following?

• A.A conflict between business practice and technological safeguards
• B.The loss of information due to poor data retention practices
• C.The practice of employees using personal devices for work
• D.A breach of an organization's data retention program

Comment: *

Name: *

Email: *

Verification: *

Although an employer may have a strong incentive or legal obligation to monitor employees' conduct or behavior, some excessive monitoring may be considered an intrusion on employees' privacy? Which of the following is the strongest example of excessive monitoring by the employer?

• A.An employer who records all employee phone calls that involve financial transactions with customers completed over the phone.
• B.An employer who installs video monitors in physical locations, such as a changing room, to reduce the risk of sexual harassment.
• C.An employer who installs a video monitor in physical locations, such as a warehouse, to ensure employees are performing tasks in a safe manner and environment.
• D.An employer who installs data loss prevention software on all employee computers to limit transmission of confidential company information.

Comment: *

Name: *

Email: *

Verification: *

Which of the following countries will continue to enjoy adequacy status under the GDPR, pending any future European Commission decision to the contrary?

• A.Greece
• B.Norway
• C.Switzerland
• D.Australia

Comment: *

Name: *

Email: *

Verification: *