Anna will find that a risk analysis is NOT necessary in this situation as long as? A. The data subjects are no longer current students of Frank’s B. The processing will not negatively affect the rights of the data subjects C. The algorithms that Frank uses for the processing are technologically sound D. The data […]

Before Anna determines whether Frank’s performance database is permissible, what additional information does she need? A. More information about Frank’s data protection training. B. More information about the extent of the information loss. C. More information about the algorithm Frank used to mask student numbers. D. More information about what students have been told and […]

SCENARIO Please use the following to answer the next question: Anna and Frank both work at Granchester University. Anna is a lawyer responsible for data protection, while Frank is a lecturer in the engineering department. The University maintains a number of types of records: • Student records, including names, student numbers, home addresses, pre-university information, […]

What is an important difference between the European Court of Human Rights (ECHR) and the Court of Justice of the European Union (CJEU) in relation to their roles and functions? A. ECHR can rule on issues concerning privacy as a fundamental right, while the CJEU cannot. B. CJEU can force national governments to implement and […]

Which EU institution is vested with the competence to propose new data protection legislation on its own initiative? A. The European Council B. The European Parliament C. The European Commission D. The Council of the European Union Reference: https://www.tandfonline.com/doi/full/10.1080/13600834.2019.1573501

A key component of the OECD Guidelines is the “Individual Participation Principle”. What parts of the General Data Protection Regulation (GDPR) provide the closest equivalent to that principle? A. The lawful processing criteria stipulated by Articles 6 to 9 B. The information requirements set out in Articles 13 and 14 C. The breach notification requirements […]

What is one major goal that the OECD Guidelines, Convention 108 and the Data Protection Directive (Directive 95/46/EC) all had in common but largely failed to achieve in Europe? A. The establishment of a list of legitimate data processing criteria B. The creation of legally binding data protection principles C. The synchronization of approaches to […]

Which statement is correct when considering the right to privacy under Article 8 of the European Convention on Human Rights (ECHR)? A. The right to privacy is an absolute right B. The right to privacy has to be balanced against other rights under the ECHR C. The right to freedom of expression under Article 10 […]