What should a controller do after a data subject opts out of a direct marketing activity?
When is the data sharing agreement MOST likely to be needed?
What permissions are required for a marketer to send an email marketing message to a consumer in the EU?
Which of the following would require designating a data protection officer?
Under the GDPR, which essential pieces of information must be provided to data subjects before collecting their personal data?
What term BEST describes the European model for data protection?
With respect to international transfers of personal data, the European Data Protection Board (EDPB) confirmed that derogations may be relied upon under what condition?
What is the key difference between the European Council and the Council of the European Union?
In addition to the European Commission, who can adopt standard contractual clauses, assuming that all required conditions are met?
Under what circumstances might the “soft opt-in” rule apply in relation to direct marketing?
Select the answer below that accurately completes the following: “The right to compensation and liability under the GDPR…
What must a data controller do in order to make personal data pseudonymous?
Which of the following was the first legally binding international instrument in the area of data protection?
Which of the following is NOT an explicit right granted to data subjects under the GDPR?
After leaving the EU under the terms of Brexit, the United Kingdom will seek an adequacy determination. What is the reason for this?
WP29’s “Guidelines on Personal data breach notification under Regulation 2016/679’ provides examples of ways to communicate data breaches transparently. Which of the following was listed as a method that would NOT be effective for communicating a breach to data subjects?
Why is it advisable to avoid consent as a legal basis for an employer to process employee data?
Pursuant to Article 4(5) of the GDPR, data is considered “pseudonymized” if?
Under Article 9 of the GDPR, which of the following categories of data is NOT expressly prohibited from data processing?