This multiple choice assessment focuses on the new General Data Protection Regulation (GDPR).

The purpose of the assessment is to enable you to assess the extent and depth of your knowledge of the Data Protection Law in preparation for the DPL.

Format: Multiple Choice

Time: 90 minutes

The result will be provided immediately, with details on all questions.

What is one major goal that the OECD Guidelines, Convention 108 and the Data Protection Directive (Directive 95/46/EC) had in common but largely failed to achieve in Europe?

What is an important difference between the European Court of Human Rights (ECHR) and the Court of Justice of the European Union (CJEU) in relation to their roles and functions?

In which of the following cases would an organization MOST LIKELY be required to follow both ePrivacy and data protection rules?

The e-Privacy Directive 2002/58/EC contains which provision?

Along with legitimacy, what is another condition that must be met when carrying out employee monitoring?

How is an employer obliged to proceed before engaging in the general monitoring of email traffic and internet use of all of its employees?

Which is an example of direct marketing?

Which treaty created the European Union?

Which instrument could be used, or which treaty could be joined, by a non-European country that wanted to demonstrate an international commitment to implement data protection legislation and to provide protection of individuals with regard to automatic processing of personal data?

What should an organisation consider when determining appropriate periods for retaining personal data?