DPL-1-4

1) Which of the following is NOT one of the GDPR data protection principles?

2) When processing personal data under the authority of the controller or processor, a processor may process data on instructions from the controller and also:

3) What is the purpose of Pseudonymisation?

4) Company X is looking to carry out new clinical trials and is considering using study subjects from another research that they previously carried out.

Identify the MOST appropriate lawful basis for processing:

5) Which of the following Article 9 (GDPR) conditions of processing may be used to store health data after the completion of the study?

6) Which of the following would definitely not be special category data?

7) What does Data Minimisation mean?

8) "It's not enough to just follow the Regulation, you also need to PROVE that you're following the Regulation". Which Principle of the GDPR does this apply to?