Study guides, Class notes & Summaries

OECD - Purpose Specification Answer The purposes for which personal data are collected should be specified not later than at the time of collection and the subsequent use limited to the fulfilment of those purposes as specified o each occasion of change of purpose. What is the fundamental basis of the relationship between employer and employee in the U.S. Answer Contract Law Information Life Cycle Phases Answer 1. Collect/Derive 2. Use/Process 3. Disclose/Transfer 4. Store/Retain/Arc...

CIPP/E Exam Questions and answers | Latest 2024/25

CIPP-US Practice Questions with 100% Correct Answers | Verified | Latest Update

CIPP-E Data Protection Chapter 1 Questions with 100% Correct Answers | Verified | Latest Update

Accountability The implementation of appropriate *technical and organisational measures* to ensure and be able to *demonstrate* that the handling of personal data is performed in accordance with relevant law, an idea codified in the EU General Data Protection Regulation and other frameworks, including APEC's Cross Border Privacy Rules. Traditionally has been a *fair information practices principle*, that due diligence and reasonable steps will be undertaken to ensure that personal information w...

Supervisory authorities data protection authorities Article 51(1)(u) requires dpas to keep records of any infringements of the Regulation, as well as records of any actions taken under Article 58(2). The keeping of these records is already a standard practice across the member states, and, indeed, they provide a primary source material for the regulators when devising their national and collective work programmes. Moreover, in some jurisdictions, such as the UK, the dpas consider the regulatory...

Universal Declaration of Human Rights (UDHR) (1948) first international legal instrument announcing the right to privacy (Article 12), catalyst for other human rights instruments in Europe European Convention on Human Rights (ECHR) (1950) international treaty to protect human rights and fundamental freedoms, right to privacy (Article 8) and many more protections of a wide scope Treaty of Rome (1957) established the European Economic Area (EEA, member states plus Iceland, Lichtenstein, and Norw...

Prohibition of cross border data transfers under Data Privacy Directive 95/46/EC apply when data transferred from a jurisdiction in the EU to a third country. What treaty or convention allowed the Data Protection Directive 95/46/EC to be used as a harmonising measure for European Member states. The Treaty of Rome Direct marketing would include: Email promoting new book on sale. What two opposing forces needed to be considered in formulating a privacy framework in the European Economic Communi...

A German data subject was the victim of an embarrassing prank 20 years ago. A newspaper website published an article about the prank at the time, and the article is still available on the newspaper's website. Unfortunately, the prank is the top search result when a user searches on the victim's name. The data subject requests that SearchCo delist this result. SearchCo agrees, and instructs its technology team to avoid scanning or indexing the article. What else must SearchCo do? (A). Notify ...

SCENARIO: Granchester University & Student RecordsANSWER THESE CARDS IN ORDER AND USE THE NEXT CARD FOR THE FOLLOWING QUESTIONS SCENARIO: Granchester University & Student Records Anna and Frank both work at Granchester University. Anna is a lawyer responsible for data protection, while Frank is a lecturer in the engineering department. The University maintains a number of types of records: Student records, including names, student numbers, home addresses, pre-university information, university...

Which statement is correct when considering the right to privacy under article 8 of the European Convention on Human Rights? The right to privacy has to be balanced against other rights under the ECHR What is the one major goal that the OECD Guidelinges, Convention 108, and the Directive all had in common but largely failed to achieve in Europe? The restriction of cross-border data flow Which EU institution is vested with the competence to propose new data protection legislation on its own ini...