MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

What does GDPR stand for?
a. General Data Protection Regulation
b. Global Data Privacy Rights
c. Government Data Policy Regulation
d. General Data Processing Rules
Answer: a. General Data Protection Regulationgdpr+2
Which region created and enforces the GDPR?
a. United States
b. Asia-Pacific
c. European Union
d. South America
Answer: c. European Uniontermly+2
What is the main purpose of GDPR?
a. To make online shopping easier
b. To protect the rights and privacy of individuals
c. To eliminate email spam
d. To encourage use of social media
Answer: b. To protect the rights and privacy of individualsfirebrand+1
What is considered personal data under the GDPR?
a. Only phone numbers
b. Only financial data
c. Any information related to an identified or identifiable person
d. Only government IDs
Answer: c. Any information related to an identified or identifiable personico+2
Which principle under GDPR ensures collected data is accurate and up-to-date?
a. Data minimization
b. Accuracy
c. Purpose limitation
d. Accountability
Answer: b. Accuracygdpr+2
What is required for businesses to process personal data lawfully?
a. Having strong internet connection
b. Obtaining a lawful basis like consent or contract
c. Posting on social media
d. Using paper forms
Answer: b. Obtaining a lawful basis like consent or contractitgovernance+2
What does “data minimization” mean under GDPR?
a. Collecting a lot of data
b. Collecting only data necessary for a specific purpose
c. Storing data forever
d. Ignoring user preferences
Answer: b. Collecting only data necessary for a specific purposetermly+2
Who is protected by the GDPR?
a. Only EU citizens
b. Only children under 18
c. All individuals within the EU
d. Only business owners
Answer: c. All individuals within the EUinvestopedia+1
What is ‘consent’ under GDPR?
a. Automatic permission
b. Explicit, informed agreement to data processing
c. Silent agreement
d. Verbal agreement only
Answer: b. Explicit, informed agreement to data processingfirebrand+2
What is the GDPR’s stance on children’s data processing?
a. No special rules
b. Stricter requirements and usually parental consent
c. Free processing allowed
d. Only written consent needed
Answer: b. Stricter requirements and usually parental consenthappiestminds+1
What is the maximum fine for GDPR violations?
a. EUR 1,000
b. 4% of global annual turnover or EUR 20 million, whichever is higher
c. EUR 500
d. No fines allowed
Answer: b. 4% of global annual turnover or EUR 20 million, whichever is higherinvestopedia+2
What does “purpose limitation” mean?
a. Using data for any reason
b. Using data only for specified, explicit purposes
c. Storing data in different countries
d. Hiding the purpose from users
Answer: b. Using data only for specified, explicit purposescyberpilot+2
Which principle under GDPR requires fairness and transparency with individuals?
a. Data minimization
b. Lawfulness, fairness, and transparency
c. Security
d. Data retention
Answer: b. Lawfulness, fairness, and transparencyico+2
What is the “right to be forgotten”?
a. Right to get more services
b. Right to have personal data erased
c. Right to unlimited storage
d. Right to transfer data
Answer: b. Right to have personal data erasedtermly+2
Who is the ‘Data Controller’ under GDPR?
a. The person whose data is collected
b. The organization or person that decides why and how personal data is processed
c. The government
d. The IT department only
Answer: b. The organization or person that decides why and how personal data is processedhappiestminds+1
What is required in case of a data breach under GDPR?
a. Report to the authorities within 72 hours
b. Ignore it unless it’s big
c. Wait for 30 days
d. Inform only the CEO
Answer: a. Report to the authorities within 72 hoursitgovernance+2
What is a ‘Data Processor’ under GDPR?
a. Someone who only collects data
b. Anyone who processes data on behalf of the data controller
c. Any customer
d. Only the government
Answer: b. Anyone who processes data on behalf of the data controllergdpr+1
Which of these is NOT a GDPR principle?
a. Accountability
b. Data minimization
c. Unlimited retention
d. Accuracy
Answer: c. Unlimited retentionico+2
What must companies provide to users regarding their data?
a. Secret forms
b. Privacy notice explaining data collection and use
c. Unlimited offers
d. No information at all
Answer: b. Privacy notice explaining data collection and useurmconsulting+2
Which role may be required for some organizations under the GDPR?
a. Data Hosting Officer
b. Data Protection Officer (DPO)
c. Chief Privacy Marketer
d. Chief Security Inspector
Answer: b. Data Protection Officer (DPO)itgovernance+2
What is “storage limitation” about?
a. Never deleting data
b. Keeping personal data only as long as needed
c. Sharing all data externally
d. Limiting storage location
Answer: b. Keeping personal data only as long as neededtermly+2
What right does the GDPR give regarding user data correction?
a. No right
b. Right to rectification (correct inaccurate data)
c. Right to share all data
d. Right to hide personal data
Answer: b. Right to rectification (correct inaccurate data)gdpr+1
What does GDPR say about data security?
a. Optional
b. Organizations must ensure data integrity and confidentiality
c. Only paper records matter
d. Only applies to email
Answer: b. Organizations must ensure data integrity and confidentialitycloudian+2
What is required if data is used for a different purpose?
a. No new requirements
b. Obtain new consent or legitimate basis
c. Double the processing
d. Store on a different server
Answer: b. Obtain new consent or legitimate basisico+1
GDPR applies to:
a. Only companies in the EU
b. Any business handling data of persons in the EU, no matter where the company is based
c. Only EU governments
d. Only internet companies
Answer: b. Any business handling data of persons in the EU, no matter where the company is basedinvestopedia+2
What is “Accountability” under GDPR?
a. Ignoring mistakes
b. Being able to show compliance with GDPR
c. Delegating all responsibility
d. Open access to all data
Answer: b. Being able to show compliance with GDPRgdpr+2
How must organizations process personal data?
a. Secretly
b. Lawfully, fairly, and transparently
c. Without any rules
d. Using only physical storage
Answer: b. Lawfully, fairly, and transparentlytermly+2
What should be done with outdated or incorrect personal data?
a. Archive it forever
b. Discard or correct it promptly
c. Ignore it
d. Store offsite
Answer: b. Discard or correct it promptlyico+1
What is DPIA under GDPR?
a. Data Privacy International Act
b. Data Protection Impact Assessment
c. Data Processing Internal Audit
d. Data Processing Internet Application
Answer: b. Data Protection Impact Assessmentfirebrand+1
Who can organizations share personal data with under GDPR?
a. Anyone
b. Only with trusted third parties and under protection agreements
c. All customers
d. No sharing is allowed
Answer: b. Only with trusted third parties and under protection agreementsitgovernance+1
What is the ‘right to data portability’?
a. The right to import data from others
b. The right to receive personal data in a usable format and transfer it
c. The right to free devices
d. No such right exists
Answer: b. The right to receive personal data in a usable format and transfer ithappiestminds+1
Which document must define the purposes, means, and storage of data?
a. Privacy notice
b. Weekly email
c. Public advertisement
d. None required
Answer: a. Privacy noticeitgovernance+1
What is meant by “integrity and confidentiality” as per GDPR?
a. Data must always be in public
b. Data processed must be secure from unauthorized access and alteration
c. Data must be sold
d. Data can be shared on social media
Answer: b. Data processed must be secure from unauthorized access and alterationcloudian+2
What happens if an organization cannot demonstrate GDPR compliance?
a. Nothing changes
b. They risk investigations and penalties
c. They automatically comply
d. They get a warning, no further action
Answer: b. They risk investigations and penaltiesinvestopedia+1
What is required by GDPR when collecting personal data for marketing?
a. No restrictions
b. Informed, clear consent
c. Automatic opt-in
d. Use default settings
Answer: b. Informed, clear consentgdpr+1
What should organizations do if requested to erase data?
a. Ignore the request
b. Validate and erase the data unless another lawful reason exists to keep it
c. Delay the response for months
d. Ask for extra payment
Answer: b. Validate and erase the data unless another lawful reason exists to keep itfirebrand+1
What is a “privacy by design” approach?
a. Security is an afterthought
b. Data protection is built into systems and processes from the start
c. Only paper forms are used
d. Privacy is optional
Answer: b. Data protection is built into systems and processes from the startitgovernance+1
Who supervises GDPR compliance in each country?
a. Local data protection authorities
b. World Health Organization
c. United Nations
d. International Police
Answer: a. Local data protection authoritieshappiestminds+1
What does the GDPR require in contracts with third-party data processors?
a. Informal agreement
b. Data Processing Agreement or similar contract
c. No contract needed
d. Verbal promise
Answer: b. Data Processing Agreement or similar contractgdpr+1
In case of a data breach that presents risk to individuals, what else must happen besides informing the authorities?
a. Inform the affected individuals
b. Delete all backups
c. Restart all systems
d. Ignore the incident
Answer: a. Inform the affected individualsitgovernance+1
What is the minimum company size required to comply with GDPR?
a. 10 employees
b. 500 employees
c. All organizations, regardless of size
d. More than 1000 employees
Answer: c. All organizations, regardless of sizezoho+2
What is a “lawful basis” for processing personal data?
a. Personal wish
b. Legal grounds required by GDPR, like consent, contract, or legal obligation
c. Email subscription only
d. Free give-away
Answer: b. Legal grounds required by GDPR, like consent, contract, or legal obligationtermly+2
Which of these is NOT covered by GDPR?
a. Name and address
b. Favorite color (if linked to an individual)
c. Anonymous data (not linked to an individual)
d. Email account
Answer: c. Anonymous data (not linked to an individual)investopedia+2
Under GDPR, for how long can personal data be stored?
a. Forever
b. Only as long as necessary for the specified purpose
c. 10 years minimum
d. Until the user leaves the country
Answer: b. Only as long as necessary for the specified purposeico+2
What is meant by the “right to object” in GDPR?
a. Right to refuse data processing in certain cases
b. Right to request more data
c. Right to delete business emails
d. Right to get free products
Answer: a. Right to refuse data processing in certain caseshappiestminds+1
What does GDPR say about transferring data outside the EU?
a. No restrictions
b. Data must be protected by adequate safeguards
c. Only paper records can be transferred
d. Always allowed
Answer: b. Data must be protected by adequate safeguardsgdpr+1
What does “data portability” mean?
a. Free data movement anywhere
b. Being able to take and use personal data with another service
c. Carry a hard drive with data
d. None of the above
Answer: b. Being able to take and use personal data with another servicehappiestminds+1
If an organization only processes personal data for scientific research, what is required?
a. Still comply with GDPR but with some special conditions
b. No compliance is necessary
c. Ignore user rights
d. Store data anywhere
Answer: a. Still comply with GDPR but with some special conditionstermly+1
GDPR applies to which types of data?
a. Personal data only
b. Only financial data
c. Only medical records
d. GPS data only
Answer: a. Personal data onlyinvestopedia+2
What happens if a company outside the EU offers goods or services to EU residents but does not follow GDPR?
a. No consequences
b. They can still face enforcement actions and fines
c. No restrictions apply
d. Automatic compliance
Answer: b. They can still face enforcement actions and finesinvestopedia+1

Blog

Systemethic Technologies

Leave a Reply Cancel reply

Useful links

Other Terms & Policies

Contact Info