Free EXIN PDPF Exam Dumps Questions & Answers

Data protection and privacy are closely related terms. Which of these options best represent this relationship?

• A.  Privacy is a part of data protection that aims to keep personal data confidential.
• B.  Without protection of personal data there is no privacy.
• C.  Data protection is a part of privacy that aims to keep personal data confidential.
• D.  The two terms have the same meaning. They are synonymous.

The General Data Protection Regulation (GDPR) came into effect on May 25, 2018, what is the legal status of this regulation?

• A.  The GDPR is only a recommendation. Member States should create laws to suit
• B.  Some articles in the GDPR provide guidance and allow Member States to draft more specific laws to suit.
• C.  The GDPR is a functional law in all EU member states and Member States cannot rectify it.

When is a Data Protection Impact Assessment (DPIA) under the General Data Protection Regulation (GDPR) mandatory?

• A.  Application of new technologies that may imply a high risk to the rights and freedoms of data subjects.
• B.  There is no security policy and information security risk analysis.
• C.  In all types of personal data processing.

In the European Union we have: Directives and Regulations. What is the difference between them?

• A.  The regulation provides guidance for EU Member States and they can create their own laws to conform to the regulation. A directive has the force of law and all EU Member States must follow it without changing it.
• B.  The directive provides guidance for EU member states and they can create their own laws to suit the directive. A regulation has the force of law and all EU Member States must follow it without changing it.

According to the GDPR, for which situations should a Data Protection Impact Assessment (DPIA) be conducted?

• A.  For any situation where technologies and processes will be subject to a risk assessment
• B.  For all sets of similar processing operations with comparable risks
• C.  For technologies and processes that are likely to result in a high risk to the rights of data subjects
• D.  For all projects that include technologies or processes that require data protection