DPL-2-3 – AllNet Law

This multiple choice assessment focuses on the new General Data Protection Regulation (GDPR).

The purpose of the assessment is to enable you to assess the extent and depth of your knowledge of the Data Protection Law in preparation for the DPL.

Format: Multiple Choice

Time: 90 minutes

The result will be provided immediately, with details on all questions.

Full Name

Email

1) Which of the following describes a country which has similar data protection standards as the EU GDPR and has received approval from the European Commission?

Privacy Shield.

Adequacy.

Derogations.

Compliance.

2) What is one major goal that the OECD Guidelines, Convention 108 and the Data Protection Directive (Directive 95/46/EC) had in common but largely failed to achieve in Europe?

A. The restriction of cross-border data flows.

B. The creation of legally binding data protection principles.

C. The synchronisation of the approaches to data protection.

D. The establishment of a list of legitimate data processing criteria.

3) A full and valid set of binding corporate rules (BCRs) must include specific elements. Which of the following is NOT one of the required elements?

A. A list of the specific categories of personal data to be processed under the BCR.

B. A list of all controllers and processors for data transfers not affected by the BCR.

C. A list of the methods through which the BCRs are communicated to data subjects.

D. A list of the tasks of any person in charge of monitoring compliance with the BCR.

4) A company is hesitating between binding corporate rules and standard contractual clauses as a global data transfer solution. Which of the following statements would help the company make an effective decision?

Binding corporate rules are especially recommended for small and medium-sized companies.

The data exporter does not need to be located in the EU for standard contractual clauses to be valid.

Binding corporate rules provide a global solution for all the entities of a company that are bound by the intra-group agreement.

The company will need the prior authorisation of all EU data protection authorities for concluding standard contractual clauses.

5. What is an important difference between the European Court of Human Rights (ECHR) and the Court of Justice of the European Union (CJEU) in relation to their roles and functions?

A. ECHR can rule on issues concerning privacy as a fundamental right, while the CJEU cannot.

B. CJEU can force national governments to implement and honour EU law, while the ECHR cannot.

C. CJEU can hear appeals on human rights decisions made by national courts, while the ECHR cannot.

D. ECHR can enforce human rights laws against governments that fail to implement them, while the CJEU cannot.