Free Preparation Discussions
MENU
Exin PDPF Exam Questions
- Topic 1: Right to Object and Automated Individual Decision-Making/ Data Protection history in ‘birds view’
- Topic 2: Purpose Limitation and Purpose Specification/ Definitions and Historical Context
- Topic 3: Legitimate Grounds and Purpose Limitation/ Right to restriction of processing
- Topic 4: Material and territorial scope of the GDPR/ Lawfulness, Fairness and Transparency
- Topic 5: Regulation versus Directive/ Transparent Information, Communication and Modalities
- Topic 6: Direct, indirect, pseudonymized personal data/ Processing of Personal Data
- Topic 7: Information to be provided to the data subject in any case/ Legitimate Grounds for Processing
- Topic 8: Information on and Access to Personal Data/ Information to be provided to the data subject when transferring personal data
- Topic 9: Right of Access (Inspection) by the Data Subject/ Automated individual decision-making, including profiling
Free Exin PDPF Exam Actual Questions
Note: Premium Questions for PDPF were last updated On Aug. 01, 2025 (see below)
A controller discovers that a data subject, who had given consent for the processing of his data, has passed away. What this implies for data processing according to the General Data Protection Regulation (GDPR)?
With the death of the data subject, the controller can process the data in any way he wishes, since personal data of deceased persons is not within the scope of the GDPR.
Recital 27 says: This Regulation does not apply to the personal data of deceased persons. Member States may provide for rules regarding the processing of personal data of deceased persons.
A controller wants to switch processors. What is necessary to review before making this change, so that it remains GDPR compliant?
Verify that the processor has sufficient security guarantees that are essential for the Controller to remain in
compliance with the GDPR. Remember that the responsibility is always of the controller who must take care of the data of the data subjects that have been entrusted to him.
Recital 81 mentions the following:
(81) To ensure compliance with the requirements of this Regulation in respect of the processing to be carried out by the processor on behalf of the controller, when entrusting a processor with processing activities, the controller should use only processors providing sufficient guarantees, in particular in terms of expert knowledge, reliability and resources, to implement technical and organizational measures which will meet the requirements of this Regulation, including for the security of processing. The adherence of the processor to an approved code of conduct or an approved certification mechanism may be used as an element to demonstrate compliance with the obligations of the controller.
A good practice is to lock the computer automatically or manually when you are away from the workstation.
The company's DPO realizes that this procedure is not being followed by employees. This occurrence should be classified in which category?
This occurrence should be classified as a security vulnerability, as it does not state whether an incident occurred for this reason.
However, the failure in this procedure can allow an incident to occur if an unauthorized person has access to the workstation.
Vulnerability is the means by which an attack can cause an information security incident.
When is a Data Protection Impact Assessment (DPIA) under the General Data Protection Regulation (GDPR) mandatory?
Whenever a new technology is applied, a DPIA must be performed. In addition, a DPIA must be performed before starting the processing of personal data. This is important to check for risks to data subjects since data collection.
In its Article 35 the GDPR legislates on the Impact assessment on data protection.
1. Where a type of processing in particular using new technologies, and taking into account the nature, scope, context and purposes of the processing, is likely to result in a high risk to the rights and freedoms of natural persons, the controller shall, prior to the processing, carry out an assessment of the impact of the envisaged processing operations on the protection of personal data. A single assessment may address a set of similar processing operations that present similar high risks.
The General Data Protection Regulation (GDPR) is related to the protection of personal dat
a. What is the definition of personal data?
In its first paragraph of Article 4, the GDPR defines:
'personal data' means any information relating to an identified or identifiable natural person...
- Select Question Types you want
- Set your Desired Pass Percentage
- Allocate Time (Hours : Minutes)
- Create Multiple Practice tests with Limited Questions
- Customer Support
Sharee
29 days agoMagnolia
1 months agoRolland
2 months agoCarman
3 months agoGiuseppe
3 months agoIsabella
3 months agoCarmen
4 months agoStacey
4 months agoEdwin
5 months agoJeanice
5 months agoElly
5 months agoDeandrea
6 months agoMargarett
6 months agoYen
6 months agoAlyssa
7 months agoTamra
7 months agoElbert
7 months agoRicarda
7 months agoThea
8 months agoAmber
8 months agoLawrence
8 months agoNoah
8 months agoRima
8 months agoCorinne
9 months agoGlenn
9 months agoPura
9 months agoRex
9 months agoAlberto
9 months agoGerri
10 months agoXochitl
10 months agoProvidencia
10 months agoBuck
10 months agoVerlene
10 months agoGearldine
11 months agoDahlia
11 months agoSabina
11 months agoChara
1 years agoMargery
1 years agoLisandra
1 years ago