单选题 Which of the following would NOT be relevant when determining if a processing activity would be considered profiling?
A、If the processing is to be performed by a third-party vendor.
B、If the processing involves data that is considered personal data.
C、If the processing of the data is done through automated means.
D、If the processing is used to predict the behaviour of data subjects.
单选题 How is the retention of communications traffic data for law enforcement purposes addressed by European data protection law?
A、The ePrivacy Directive allows individual EU member states to engage in such data retention.
B、The ePrivacy Directive harmonies EU member states'rules concerning such data retention.
C、The Data Retention Directive's annulment makes such data retention now permissible.
D、The GDPR allows the retention of such data for the prevention,investigation,detection or prosecution of criminal offences only.
单选题 According to the E-commerce Directive 2/31/EC,where is the place of"establishment"for a company providing services via an Internet website confirmed by the GDPR?
A、Where the technology supporting the website is located.
B、Where the website is accessed.
C、Where the decisions about processing are made.
D、Where the customer's Internet service provider is located.
单选题 Assuming that the"without undue delay"provision is followed,what is the time limit for complying with a data access request?
A、With in 4 days of receipt.
B、Within 4 days of receipt,which may be extended by up to 4 additional days.
C、Within one month of receipt,which may be extended by up to an additional month.
D、With in one month of receipt,which may be extended by an additional two months.
单选题 Article 5(l)(b)of the GDPR states that personal data must be"collected for specified,explicit and legitimate purposes and not further processed in a way incompatible with those purposes."Based on Article 5(l)(b),what is the impact of a member state's interpretation of the word"incompatible"?
A、It dictates the level of security a processor must follow when using and storing personal data for two different purposes.
B、It guides the courts on the severity of the consequences for those who are convicted of the intentional misuse of personal data.
C、It sets the standard for the level of detail a controller must record when documenting the purpose for collecting personal data.
D、It indicates the degree of flexibility a controller has in using personal data in ways that may vary from its original intended purpose.
单选题 With the issue of consent,the GDPR allows member states some choice regarding what?
A、The mechanisms through which consent may be communicated.
B、The circumstances in which silence or inactivity may constitute consent.
C、The age at which children must be required to obtain parental consent.
D、The timeframe in which data subjects are allowed to withdraw their consent.
单选题 Article 6 of the GDPR provides for six different legal bases for lawful processing,but not all of them are equally available to everyone.What is an example of such a legal basis with limited applicability?
A、"consent"under Article 6(1)(a)is not available to data intermediaries/aggregators.
B、"Vital interests"under Article 6(1)(d)is only available to the health care sector.
C、"Public interest"under Article 6(1)(e)is only available to public authorities.
D、"Legitimate interest”under Article 6(1)(f)is not applicable to cases involving children.
单选题 Which statement is correct when considering the right to privacy under Article 8 of the European Convention on Human Rights(ECHR) ?
A、The right to privacy is an absolute right.
B、The right to privacy has to be balanced against other rights under the ECHR.
C、The right to freedom of expression under Article 10 of the ECHR will always override the right to privacy.
D、The right to privacy protects the right to hold opinions and to receive and impart ideas without interference.
2025-08-06
共568道
