This multiple choice assessment focuses on the General Data Protection Regulation (GDPR).

The purpose of the assessment is to enable you to assess the extent and depth of your knowledge of the Data Protection Law.

Format: Multiple Choice

The result will be provided immediately, with details on all questions.

1. The main difference between directives and regulations is that directives are applicable to all EU member states, whereas regulations are not applicable to all member states.

2. Which of the following statements is correct?

Member States have a certain degree of freedom to apply specific rules regarding the processing of personal data in line with their own national laws, if the regulation specifically allows it.

3. The GDPR is relevant and applicable to:

The GDPR applies to a controller or processor not established in the European Union, in cases when the processing activities relate to the offering of goods or services or to the monitoring of the behavior of data subjects who are in the EU.

4. What is one of the roles of the European Data Protection Board?

The European Data Protection Board advises the European Commission on issues related to data protection in the EU, including any proposed amendments of the GDPR and any EU legislative proposals.

5. What is the primary aim of the GDPR?

The GDPR is the primary law that regulates the way organizations protect the data of EU citizens.

6. The maximum administrative fine that can be issued under the GDPR is ____________________, whichever is higher.

The maximum administrative fine that can be issued under the GDPR is up to 20,000,000 EUR, or in a case of an undertaking, up to 4% of the total worldwide turnover of the preceding financial year.