Exam Part 1 of 4

Please answer all questions, then click Continue to Part 2.

Timing policy: 25 minutes total from starting Part 1.

Full Name *
Email Address *
Organization *
1) Personal data is defined as:	A. Aggregated, fully anonymized data B. Any information relating to an identified or identifiable natural person C. Only medical data D. Only financial data
2) A lawful basis for processing may include:	A. Consent, contract, legal obligation, vital interest, public task, legitimate interests B. Marketing only C. Internal policy only D. None
3) Data minimization principle requires:	A. Collect only what is necessary B. Collect everything C. Keep data forever D. Share widely
4) Briefly explain a Subject Access Request (SAR) workflow. *
5) The role of a Data Protection Officer (DPO) includes:	A. Monitoring compliance and advising on obligations B. Approving all marketing C. Managing payroll D. Running sales