Foundation Certificate in General Data Protection Regulation (GDPR) Exam
Q1: Which of the following best describes the primary objective of the GDPR?
- To restrict all forms of data processing globally
- To create uniform data protection rules across EU member states
- To eliminate the need for data protection officers
- To replace national laws with a single global regulation
Answer: B
Explanation: GDPR’s key aim is to harmonize data protection regulations and
strengthen individual rights across all EU member states.
Q2: Under the GDPR, which term refers to any information relating to an
identified or identifiable person?
- Personal Data
- Public Data
- Company Confidential Data
- None of the above
Answer: A
Explanation: Personal Data is any information that can directly or indirectly
identify an individual.
- / 4
Foundation Certificate in General Data Protection Regulation (GDPR) Exam
Q3: Which term describes an individual whose personal data is collected, held, or processed?
- Data Subject
- Data Processor
- Data Controller
- Data Guardian
Answer: A
Explanation: The Data Subject is the person to whom the personal data relates.
Q4: Which entity determines the purposes and means of processing personal
data?
- Data Subject
- Data Controller
- Data Processor
- Supervisory Authority
Answer: B
Explanation: The Data Controller makes decisions about how and why personal
data is processed.
- / 4
Foundation Certificate in General Data Protection Regulation (GDPR) Exam
Q5: Which of the following is a role under the GDPR responsible for processing
personal data on behalf of the controller?
- Data Subject
- Data Processor
- Supervisory Authority
- Compliance Officer
Answer: B
Explanation: A Data Processor handles personal data based on the instructions of the Data Controller.
Q6: Under GDPR, why is the concept of “fairness” important?
- It ensures data is kept forever
- It requires transparent treatment of personal data
- It allows data to be sold without consent
- It permits unlimited processing for any purpose
Answer: B
Explanation: Fairness involves informing individuals about how their data is used and respecting their rights.
Q7: Which of the following is NOT a key principle of the GDPR? 3 / 4
Foundation Certificate in General Data Protection Regulation (GDPR) Exam
- Purpose Limitation
- Unlimited Data Retention
- Integrity and Confidentiality
- Accountability
Answer: B
Explanation: GDPR requires Storage Limitation, not unlimited data retention.
Q8: What is the main goal of the “Purpose Limitation” principle?
- Ensuring data is used only for specified, legitimate purposes
- Allowing any secondary use of data without restrictions
- Requiring data to be publicly disclosed
- Limiting access to only the Data Controller
Answer: A
Explanation: Purpose Limitation states that data collected for one purpose should not be used for incompatible purposes without further consent.
Q9: Data Minimization under GDPR means:
- Collecting as much data as possible for future analysis
- Collecting only the data necessary for intended purposes
- / 4