Free EXIN PDPF Exam Dumps Questions & Answers

For processing of personal data to be legal, a number of requirements must be fulfilled.
What is a requirement for lawful personal data processing?

• A.  A 'code of conduct', describing what the processing exactly entails, must be in place.
• B.  The data subject must have given consent, prior to the processing to begin.
• C.  There must be a legitimate ground for the processing of personal data.
• D.  The processing must be reported to and allowed by the Data Processing Authority

After appearing in a photo posted by a friend on a social network, a person felt embarrassed and decided that he wants the photo to be deleted.
According to the General Data Protection Regulation (GDPR), does that person have the right to delete this photo?

• A.  False
• B.  True

Which of the options below is classified as a personal data breach under the GDPR?

• A.  Strategic company data is mistakenly shared.
• B.  A server is attacked and exploited by a hacker.
• C.  Personal data processed without the consent of the controller.
• D.  Data accessed by employees without permission.

GDPR quotes in one of its principles that personal data should be adequate, relevant and limited to what is necessary in relation to its purpose. What principle is this?

• A.  lawfulness, loyalty and transparency
• B.  integrity and confidentiality
• C.  data minimization
• D.  purpose limitation

What is the essence of the principle 'Full Lifecycle Protection'?

• A.  Delivering the maximum degree of data protection by default, ensuring that personal data are automatically protected in any given IT system or business practice.
• B.  Prioritizing the protection of the interests of the individual by offering for example strong privacy defaults, appropriate notice or empowering user-friendly options.
• C.  Ensuring that whatever business practice or technology is involved, processing is done according to the stated objectives, subject to independent verification.
• D.  Embedding security measures to protect the data from the moment it is collected, throughout processing until it is destroyed at the end of the process.