1. What is GDPR?

General Data Protection Regulation

General Data Processing Regulation

Government Data Protection Regulation

Government Data Processing Regulation

2. GDPR applies to

All data controllers established in the EU

Data processors operating in the EU

All data controllers, processors and organisations that handle EU residents' data

Data processors operating in the USA

3. Your website uses customer tracking software. What will you do about it?

Inform website visitors that they are being tracked

Inform website visitors that they are being tracked and give them an option to allow or disallow tracking

Don't inform visitors — it's not important anyway

Tracking website visitors is not allowed under GDPR

4. Three of your customers want you to erase their data from your database. What action will you take?

I'm not sure

There is no way to withdraw consent, so I don't need to erase anything

Verify the request, validate your lawful basis, & erase the data if it no longer needs to be with you.

Ask the customers to contact DPOs in the organization

5. What is the minimum size for companies to comply with GDPR?

1-10 employees

10-50 employees

500+ employees

All companies have to comply with GDPR

6. Which of the following is NOT a best practice for email marketing?

Use double-opt-in signup forms to capture details

Add email preferences in your welcome emails

Do not allow subscribers to update their profiles.

Obtain subscribers' consent before running promotions

7. Your friend tells you, "My business is not online, so I needn't worry about GDPR." How will you respond?

That's great, I heard GDPR applies to ecommerce businesses only.

GDPR will require you to bring your business online

You're fine as long as your EU customers don't use your online store.

GDPR applies to any business online or offline, that maintains an inventory of personal data of any EU resident.

8. Only marketers are responsible for the customer data that flows in and out of any company.



9. With GDPR in effect, what questions a marketer will have to answer about the data they collect?

What is the purpose behind processing any data?

With whom is the data shared?

Why is the data retained?

All of the above

10. "Where do I begin with GDPR?" Choose a suitable answer.

I have the same question. Please help!

Everything is online, just read about it and you are good to go :)

Call your national tax authority and ask them to explain it to you

Start by making a Data Flow Diagram (DFD) and a Data Flow Matrix (DFM) to get a clear picture of how data flows within a business process.

11. Which of the following is NOT a data subject right?

Data portability

Right to access

Right to be forgotten

Right to equality

12. What is the penalty for a breach of GDPR?

5% of annual global turnover

4% of annual global turnover or €20 million, whichever is greater

€20 million

5% of annual global turnover or €20 million, whichever is greater

13. Which of the following is NOT a principle under GDPR?



Data Collection Limitation