Under Article 21 of the GDPR, a controller must stop profiling when requested by a data subject, unless it can demonstrate compelling legitimate grounds that override the interests of the individual. In the Guidelines on Automated individual decision-making and Profiling, the WP 29 says the controller needs to do all of the following to demonstrate that it has such legitimate grounds EXCEPT?

• A.Consider the impact of the profiling on the data subject's interest, rights and freedoms.
• B.Carry out an exercise that weighs the interests of the controller and the basis for the data subject's objection.
• C.Demonstrate that the profiling is for the purposes of direct marketing.
• D.Consider the importance of the profiling to their particular objective.

Comment: *

Name: *

Email: *

Verification: *

Which GDPR requirement will present the most significant challenges for organizations with Bring Your Own Device (BYOD) programs?

• A.Data subjects must be sufficiently informed of the purposes for which their personal data is processed.
• B.Personal data of data subjects must always be accurate and kept up to date.
• C.Processing of special categories of personal data on a large scale requires appointing a DPO.
• D.Data controllers must be in control of the data they hold at all times.

Comment: *

Name: *

Email: *

Verification: *

Which area of privacy is a lead supervisory authority's (LSA) MAIN concern?

• A.Data subject rights
• B.Data access disputes
• C.Cross-border processing
• D.Special categories of data

Comment: *

Name: *

Email: *

Verification: *

The Planet 49 CJEU Judgement applies to?

• A.Cookies used only by third parties.
• B.Cookies that are deemed technically necessary.
• C.Cookies regardless of whether the data accessed is personal or not.
• D.Cookies where the data accessed is considered as personal data only.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is NOT an explicit right granted to data subjects under the GDPR?

• A.The right to request access to the personal data a controller holds about them.
• B.The right to opt-out of the sale of their personal data to third parties.
• C.The right to request the deletion of data a controller holds about them.
• D.The right to request restriction of processing of personal data, under certain scenarios.

Comment: *

Name: *

Email: *

Verification: *