Pursuant to Article 4(5) of the GDPR, data is considered "pseudonymized" if?

• A.It cannot be attributed to a data subject without the use of additional information.
• B.It can only be attributed to a person by a third party.
• C.It can only be attributed to a person by the controller.
• D.It cannot be attributed to a person under any circumstances.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is an example of direct marketing that would be subject to European data protection laws?

• A.A service outage notification provided to an individual by recorded telephone message.
• B.A charity fundraising event notice sent to an individual at her business address.
• C.A revision of contract terms conveyed to an individual by SMS from a marketing organization.
• D.An updated privacy notice sent to an individual's personal email address.

Comment: *

Name: *

Email: *

Verification: *

SCENARIO
Please use the following to answer the next question:
BHealthy, a company based in Italy, is ready to launch a new line of natural products, with a focus on sunscreen. The last step prior to product launch is for BHealthy to conduct research to decide how extensively to market its new line of sunscreens across Europe. To do so, BHealthy teamed up with Natural Insight, a company specializing in determining pricing for natural products. BHealthy decided to share its existing customer information - name, location, and prior purchase history - with Natural Insight. Natural Insight intends to use this information to train its algorithm to help determine the price point at which BHealthy can sell its new sunscreens.
Prior to sharing its customer list, BHealthy conducted a review of Natural Insight's security practices and concluded that the company has sufficient security measures to protect the contact information. Additionally, BHealthy's data processing contractual terms with Natural Insight require continued implementation of technical and organization measures. Also indicated in the contract are restrictions on use of the data provided by BHealthy for any purpose beyond provision of the services, which include use of the data for continued improvement of Natural Insight's machine learning algorithms.
Under the GDPR, what are Natural Insight's security obligations with respect to the customer information it received from BHealthy?

• A.The level of security that a reasonable data subject whose data is processed would expect in relation to the data subject's purchase history.
• B.Appropriate security that takes into account the industry practices for protecting customer contact information and purchase history.
• C.Only the security measures assessed by BHealthy prior to entering into the data processing contract.
• D.Absolute security since BHealthy is sharing personal data, including purchase history, with Natural Insight.

Comment: *

Name: *

Email: *

Verification: *

Which type of personal data does the GDPR define as a "special category" of personal data?

• A.Trade-union membership.
• B.Financial information.
• C.Closed Circuit Television (CCTV) footage.
• D.Educational history.

Comment: *

Name: *

Email: *

Verification: *

Tanya is the Data Protection Officer for Curtains Inc., a GDPR data controller. She has recommended that the company encrypt all personal data at rest. Which GDPR principle is she following?

• A.Storage Limitation
• B.Accuracy
• C.Integrity and confidentiality
• D.Lawfulness, fairness and transparency

Comment: *

Name: *

Email: *

Verification: *