Certified Information Privacy Professional/Europe (CIPP/E): CIPP-E

When would a data subject NOT be able to exercise the right to portability?

A. When the processing is necessary to perform a task in the exercise of authority vested in the controller.

B. When the processing is carried out pursuant to a contract with the data subject.

C. When the data was supplied to the controller by the data subject.

D. When the processing is based on consent.

Higher fines are assessed for GDPR violations due to which of the following?

A. Failure to notify a supervisory authority and data subjects of a personal data breach

B. Violations of a data controller's obligations to obtain a child's consent

C. Failure to appoint a data protection officer.

D. Violations of a data subject"s rights

Which sentence BEST summarizes the concepts of "fairness," "lawfulness" and "transparency", as expressly required by Article 5 of the GDPR?

A. Fairness and transparency refer to the communication of key information before collecting data; lawfulness refers to compliance with government regulations.

B. Fairness refers to limiting the amount of data collected from individuals; lawfulness refers to the approval of company guidelines by the state; transparency solely relates to communication of key information before collecting data.

C. Fairness refers to the security of personal data; lawfulness and transparency refers to the analysis of ordinances to ensure they are uniformly enforced.

D. Fairness refers to the collection of data from diverse subjects; lawfulness refers to the need for legal rules to be uniform; transparency refers to giving individuals access to their data.