This multiple choice assessment focuses on the General Data Protection Regulation (GDPR).
The purpose of the assessment is to enable you to assess the extent and depth of your knowledge of the Data Protection Law.
Format: Multiple Choice
The result will be provided immediately, with details on all questions.
1. In order to comply with the GDPR, organizations should fulfill some mandatory requirements on how to document processes and data protection controls.
There is no mandatory requirement on how to document processes and data protection controls. This can be done by using diagrams, textual description, spreadsheets, etc.
2. What is the task of DPO in documentation management?
Among others, the DPO is responsible for creating and maintaining documented information of daily tasks. This enables the DPO to demonstrate their commitment to data protection by being capable of analyzing the available evidence in a timely and constructive manner.
3. Which of the following statements is incorrect?
The preparation of documentation is regarded as a value-adding activity to the overall performance of the DPO, rather than a priority. Maintaining documentation helps in detecting the gaps in personal data processing activities and demonstrates compliance to the GDPR.
4. Work documents are used to show compliance. How should work documents be?
Work documents should include facts whether the controller is compliant with the GDPR or not, and, at the same time, provide clear information that enables the evaluation of the evidence collected.
Identify the MOST appropriate lawful basis for processing:
5. Which document type below describes actions plans to improve the organization’s processes to comply with the GDPR?
Strategic documents, together with records, checklists, etc., are a type of document that the DPO can create and maintain while completing their daily tasks. Strategic documents describe the action plan with the DPO’s advice to further improve the organization’s processes to comply with the GDPR
6. Highly voluminous documentation is necessary for the controller to demonstrate GDPR compliance.
