When does the GDPR provide more latitude for a company to process data beyond its original collection purpose?

• A.When the data serves legitimate interest of third parties.
• B.When the data subject has failed to use a provided opt-out mechanism.
  Section: (none)
  Explanation
• C.When the data has been pseudonymized.
• D.When the data is protected by technological safeguards.

Comment: *

Name: *

Email: *

Verification: *

Please use the following to answer the next question:
Jane Stan's her new role as a Data Protection Officer (DPO) at a Malta-based company that allows anyone to buy and sell cryptocurrencies via its online platform. The company stores and processes the personal data of its customers in a dedicated data center located in Malta |EU).
People wishing to trade cryptocurrencies are required to open an online account on the platform. They then must successfully pass a KYC due diligence procedure aimed at preventing money laundering and ensuring compliance with applicable financial regulations.
The non-European customers are also required to waive all their GDPR rights by reading a disclaimer written in bold and belong a checkbox on a separate page in order to get their account approved on the platform.
The customers must likewise accept the terms of service of the platform. The terms of service also include a privacy policy section, saying, among other things, that if a Which of the following must be a component of the anti-money-laundering data-sharing practice of the platform?

• A.The terms of service shall also enumerate all applicable anti-money laundering few.
• B.Customers shall have an opt-out feature to restrict data sharing with law enforcement agencies after the registration.
• C.The terms of service shall include the address of the anti-money laundering agency and contacts of the investigators who may access me data.
• D.Customers snail receive a clear and conspicuous notice about such data sharing before submitting their data during the registration process.

Comment: *

Name: *

Email: *

Verification: *

A Spanish electricity customer calls her local supplier with Questions: about the company's upcoming merger. Specifically, the customer wants to know the recipients to whom her personal data will be disclosed once the merger is final. According to Article 13 of the GDPR, what must the company do before providing the customer with the requested information?

• A.Verify that the request is applicable to the data collected before the GDPR entered into force.
• B.Verify that the purpose of the request from the customer is in line with the GDPR.
• C.Verify that the personal data has not already been sent to the customer.
• D.Verify that the identity of the customer can be proven by other means.

Comment: *

Name: *

Email: *

Verification: *

To which of the following parties does the territorial scope of the GDPR NOT apply?

• A.All member countries party to the Treaty of Lisbon.
• B.All member countries of the European Economic Area.
• C.All member countries party to the Paris Agreement.
• D.All member countries of the European Union.

Comment: *

Name: *

Email: *

Verification: *

Please use the following to answer the next question:
ProStorage is a multinational cloud storage provider headquartered in the Netherlands. Its CEO. Ruth Brown, has developed a two-pronged strategy for growth: 1) expand ProStorage s global customer base and 2) increase ProStorage's sales force by efficiently onboarding effective teams. Enacting this strategy has recently been complicated by Ruth's health condition, which has limited her working hours, as well as her ability to travel to meet potential customers. ProStorage's Human Resources department and Ruth's Chief of Staff now work together to manage her schedule and ensure that she is able to make all her medical appointments The latter has become especially crucial after Ruth's last trip to India, where she suffered a medical emergency and was hospitalized m New Delhi Unable to reach Ruths family, the hospital reached out to ProStorage and was able to connect with her Chief of Staff, who in coordination with Mary, the head of HR. provided information to the doctors based on accommodate on requests Ruth made when she started a: ProStorage Why was Jackie correct in not completing a transfer impact assessment for HRYourWay?

• A.ProStorage can rely on its Binding Corporate Rules
• B.HRYourWay was ultimately not selected
• C.HRYourWay is not located in a third country.
• D.ProStorage will obtain consent for all transfers.

Comment: *

Name: *

Email: *

Verification: *