CIPPE M7 – AllNet Law

This multiple choice assessment focuses on the new General Data Protection Regulation (GDPR).

The purpose of the assessment is to enable you to assess the extent and depth of your knowledge of the Data Protection Law in preparation for the DPL.

Format: Multiple Choice

Time: 90 minutes

The result will be provided immediately, with details on all questions.

Full Name

Email

1) Which of the following describes a country which has similar data protection standards as the EU GDPR and has received approval from the European Commission?

A) Privacy Shield.

B) Adequacy.

C) Derogations.

D) Compliance.

2) A company is hesitating between binding corporate rules and standard contractual clauses as a global data transfer solution. Which of the following statements would help the company make an effective decision?

A) Binding corporate rules are especially recommended for small and medium-sized companies.

B) The data exporter does not need to be located in the EU for standard contractual clauses to be valid.

C) Binding corporate rules provide a global solution for all the entities of a company that are bound by the intra-group agreement.

D) The company will need the prior authorisation of all EU data protection authorities for concluding standard contractual clauses.

3) Why do Binding Corporate Rules (BCRs) prohibit the transfer of employee names to telecom providers within the same country in order to provide them with mobile phone services?

A) because BCRs only provide adequate safeguards for organisations who move data outside their corporation

B) because BCRs secure transfers to third parties without additional requirements

C) because BCRs only deal with intra-organisational transfers and not with transfers to third parties

D) because BCRs require contractual arrangements to legitimize international transfers of data

4) Under the GDPR, which of the following is true in regard to adequacy decisions involving cross-border transfers?

A) The European Commission can adopt an adequacy decision for individual companies.

B) The European Commission can adopt, repeal or amend an existing adequacy decision.

C) EU member states are vested with the power to accept or reject a European Commission adequacy decision.

D) To be considered as adequate, third countries must implement the EU General Data Protection Regulation into their national legislation.

5) Which of the following countries has had their commercial organisations deemed adequate by the European Commission?

A) Canada

B) Argentina

C) United Kingdom

D) Switzerland