Data Disclosure and Transfer CDPSE Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which of the following is a key step in mitigating the impact of an unauthorized data disclosure?

   • AAssessing the risk to data subjects and notifying the appropriate authorities if required
   • BWaiting for a data subject to complain before taking action
   • CImmediately deleting all copies of the data without investigation
   • DKeeping the incident confidential to avoid reputational damage
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A company plans to share customer data with a third-party analytics provider. The provider is located in a country with an adequacy decision. The company's privacy policy does not mention analytics. What is the MOST appropriate action before sharing the data?

   • AUpdate the privacy policy and obtain consent if required by law
   • BProceed with the sharing because the provider is contractually bound to confidentiality
   • CAnonymize the data before sharing to avoid any notice requirement
   • DRely on the adequacy decision to justify the sharing
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A data subject objects to the transfer of their personal data to a third-party marketing vendor. The company has a legitimate interest basis for the transfer. Under GDPR, what should the company do?

   • ARequire the data subject to provide a compelling reason for the objection
   • BTransfer the data but inform the data subject of the right to object
   • CIgnore the objection because the company has a legitimate interest
   • DStop the transfer unless the company demonstrates compelling legitimate grounds that override the data subject's interests
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which mechanism allows personal data to be transferred from the EU to a non-EU country without additional authorization because the country's data protection laws are recognized as essentially equivalent?

   • AExplicit consent
   • BAdequacy decision
   • CBinding Corporate Rules
   • DStandard Contractual Clauses
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which of the following is a key risk of disclosing personal data to a third-party vendor?

   • AThe vendor's processing is always covered by an adequacy decision
   • BThe vendor may use the data for purposes beyond the agreed scope
   • CThe vendor will always store data in the same jurisdiction
   • DThe vendor is automatically exempt from data protection laws
   Reveal Solution Discussion Select an answer first