Question 1 of 10 · Introduction to European Data Protection
Which rule governs data processing by police and criminal justice authorities in the EU?
Directive 2016/680 covers processing by competent authorities for criminal law enforcement purposes, which falls outside the GDPR under Article 2(2)(d).
Question 2 of 10 · European Data Protection Law and Regulation
Which statement about onward transfers under an adequacy decision is accurate?
Chapter V requires that the level of protection is not undermined by onward transfers, which adequacy frameworks address.
Question 3 of 10 · European Data Processing
Which test does a controller apply before relying on legitimate interests?
Legitimate interests requires a legitimate purpose, necessity and a balancing test in which the data subject's interests, rights and reasonable expectations are weighed.
Question 4 of 10 · European Data Protection: Scope and Accountability
A company in the US offers goods to consumers in France through a French-language website priced in euros, with no EU establishment. Does the GDPR apply?
Article 3(2)(a) applies the GDPR to controllers outside the EU that offer goods or services to data subjects in the Union. Language, currency and delivery indicate targeting.
Question 5 of 10 · Compliance with European Data Protection Law and Regulation
What is the main data protection issue with bring-your-own-device schemes?
BYOD mixes personal and business data, requiring separation, security measures and limits on monitoring of personal content.
Question 6 of 10 · Introduction to European Data Protection
Which Charter article specifically establishes the right to the protection of personal data?
Article 8 of the Charter sets out the right to data protection, including independent supervision. Article 7 covers private life, Article 11 expression and Article 47 effective remedy.
Question 7 of 10 · European Data Protection Law and Regulation
Which derogation allows occasional transfers necessary for a contract with the data subject?
Article 49(1)(b) covers transfers necessary for performance of a contract between the data subject and controller. Derogations are interpreted restrictively.
Question 8 of 10 · European Data Processing
Which processing of criminal conviction data is permitted under Article 10?
Article 10 allows processing only under the control of official authority or when authorised by EU or member state law providing safeguards.
Question 9 of 10 · European Data Protection: Scope and Accountability
What does data protection by default require?
Article 25(2) requires that by default only necessary data is processed, covering amount, extent, period and accessibility.
Question 10 of 10 · Compliance with European Data Protection Law and Regulation
An employer wants to screen job applicants' social media. What is the key requirement?
EDPB guidance holds that publicly available data is still personal data; employers need a legal basis, necessity for the role and transparency.
0 of 10
Introduction to European Data Protection
European Data Protection Law and Regulation
European Data Processing
European Data Protection: Scope and Accountability
Compliance with European Data Protection Law and Regulation
Which domains cost you the points? Members see a breakdown by domain and a study plan built from it.