GDPR Core

Question 1

Personal Data (EU)

Answer 1

Info relating to an identified or identifiable natural person.

Question 2

How can a natural person be identified?

Answer 2

Directly or indirectly

Question 3

Attributes that can be used to identify a person

Answer 3

ID Number

Factors relating to physical, psychological, mental, economic, cultural, or social identity.

Question 4

What are these?

ID Number
Factors relating to physical, psychological, mental, economic, cultural, or social identity.

Answer 4

Personal data

Question 5

Natural personal

Answer 5

An actual human to whom data applies

Schellman.com definition

Question 6

Data processing

Answer 6

Any operations performed on personal data.

Question 7

What are these examples of regarding personal data?

Collection
Recording
Storage
Adaptation
Retrieval
Consultation
Disclosure
Alignment/Combination
Erasure

Answer 7

Data processing

Question 8

Right to restriction

Answer 8

Individual’s right to limit/prohibit an entity from processing personal data.

Question 9

Profiling

Answer 9

Any form of automated processing of personal data to evaluate personal aspects.

Question 10

What does profiling do?

Answer 10

Make predictions about work performance, credit, health, interests, behavior, location, etc.

Question 11

Automated processing of personal data to make predictions is called…

Answer 11

Profiling

Question 12

Pseudonymisation

Answer 12

Processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information.

Question 13

How do you prevent pseudonymisation from being reversed?

Answer 13

Keep identifying information separate from pseudonymized data using technical and organizational measures.

Question 14

Who does pseudonymized data apply to?

Answer 14

Identified or identifiable natural persons.

Data subjects

Question 15

Data controller

Answer 15

Determines the purposes and means of the processing of personal data

Question 16

Who can be a data controller? (4+1)

Answer 16

Natural or legal person
Public authority
Agency
Any other body alone or jointly that determines purpose and means of processing.

May be determined by EU or member state law.

Question 17

Data processor

Answer 17

Processes personal data on behalf of the controller

Question 18

Who can be a data processor?

Answer 18

Natural or legal person (other than an employee of the controller)
Public authority
Agency

Question 19

Can an organization be both a processor and controller?

Answer 19

Yes

Question 20

What can a natural or legal person, public authority, or

agency be? (4)

Answer 20

Data Controller
Data Processor
Data Recipient
Third Party

Question 21

Data recipient

Answer 21

A person/entity to which personal data is disclosed, except public authorities in an inquiry in accordance with EU/state law.

Question 22

Who is not regarded as a data recipient?

Answer 22

Public authorities in the “framework” of an inquiry (in accordance with law).