BCS PDP9 BCS Practitioner Certificate in Data Protection Exam Exam Practice Test Questions

• Question 1

  A company based in France uses a specialist IT support business in China The two companies have signed a Data Processing Agreement. The Chinese business provides specialist IT support for the French company's digital customer experience platform No personal data is sent to China, but employees of the Chinese business access the platform on a regular basis and have access to the databases that sit behind it. Which of the following statements is CORRECT in relation to the French company's requirements to ensure compliance with the GDPR?

  • No personal data is being transferred, therefore no transfer mechanism is needed
  • The French company must identify and implement an appropriate transfer mechanism
  • There is a Data Processing Agreement in place therefore no transfer mechanism is needed
  • China provides an adequate level of protection for personal data, therefore no transfer mechanism is needed

  Show Answer Answer: B Next

• Question 2

  Which of the following is NOT a role of the Information Commissioner's Office?

  • Publishing a list of the kind of processing that is subject to the requirement for a DPIA
  • Providing an annual activity report to Parliament
  • Providing case by case advice on what retention period companies should use
  • Encouraging the establishment of data protection certification mechanisms and of data protection seals

  Show Answer Answer: C Next

• Question 3

  When were data protection rights first introduced into UK law'?

  • 2000 (Data Protection Act 1998)
  • 1992 (Data Protection Act 1992).
  • 1984 (Data Protection Act 1984).
  • 2018 (Data Protection Act 2018)

  Show Answer Answer: C Next

• Question 4

  What factors should be considered when looking at security of processing under Article 32 of the GDPR?Select the INCORRECT answer

  • Lawfulness of processing
  • The most secure option available
  • The likelihood of a risk to the rights of the data subjects
  • Adherence to an approved code of conduct

  Show Answer Answer: A Next

• Question 5

  Which of the following statements MOST accurately describes the potential impact of Al on the principle of transparency?

  • Data subjects should generally expect Al to be present in processing activities
  • Transparency requirements do not apply to Al, as it is always compatible with original purposes
  • Al can lead to invisible processing, with data subjects not being aware of its presence.
  • Transparency requirements do not apply to Al, as there is a relevant exemption

  Show Answer Answer: C Next