BCS Practitioner Certificate in Data Protection PDP9 Exam Online Dumps

1. Who is entitled to a private life by law in the UK?

2. When were data protection rights first introduced into UK law'?

3. A company has twenty retail outlets in France and thirty retail outlets in Belgium. The payroll department and the Data Protection Officer are based in Poland. The Company Board and administrative functions are based in Germany. Determine where the company's 'main establishment' would be

4. Under which circumstances can the 'domestic purposes' exemption be used to justify non-compliance with the Data Protection Act 2018?

A) An individual sells make up products for commission and uses social media to promote products to friends and family

B) A couple are planning their daughter's wedding and use excel to store contact details and dietary needs of the guests

C) An individual employs a babysitter and stores her bank details in an encrypted document in order to make payments

D) A pansh council keeps a spreadsheet to manage bookings of the village hall, it contains only contact information and time slots

E) A group of students are arranging a house party and using social media to invite people that they do and do not know

5. What is the meaning of storage limitation in relation to UK GDPR Article 5 (1)(e)?

6. Which of the below would be the BEST example of processing that could utilise the Public Interest Task lawful basis?

7. Article 9(2)(c) of UK GDPR condition of processing special category data in the vital interests of the data subject is only applicable in which of the following circumstances:

8. What is the basis of the accountability and data governance obligation (Article 5 (2) of the GDPR)?

9. Of the following options which is NOT a purpose of carrying out a Data Protection Impact Assessment (DPIA)?

10. You are a consulting Data Protection Officer (DPO) for a holiday resort You have been asked to conduct a Data Protection Impact Assessment (DPIA) for them in advance of adopting a new HR management database.

While working through the DPIA, which of the following is NOT a requirement?

11. Which of the following statements are CORRECT about records of processing'?

A) It must contain contact details for the Data Protection Officer where applicable.

B) It must be submitted to the Information Commissioner's Office following every Data Protection Impact Assessment

C) It is mandatory for all data processors

D) The controller or the processor a must makes the record available to the supervisory authority on request

E) It must contain contact details for the supervisory authority

12. A privacy notice MUST NOT contain