Module 2

Question 1

Four-step test

Answer 1

• To determine whether personal data is involved

1. Any information
2. Relating to
3. An identified or identifiable
4. Natural person

Question 2

Anonymous

Answer 2

• Not traceable
• No additional data
• Irreversible

> no AVG

Question 3

Pseudonymous

Answer 3

• Data cannot be linked without additional data
• Kept separatly
• Security measures

> AVG

Question 4

Special categories of personal data

Answer 4

• Racial or ethnic origin
• Sexual orientation
• Political opinions
• Religious of philosophical beliefs
• Trade union membership (vakbond)
• Genetic, biometric or health aspects
• Criminal convictions and violations (Not considered special data, but subject to limitations on processing)

Question 5

What is the function of the
four-step test?

Answer 5

Determine if data qualifies as personal
data

Question 6

True or false: Pseudonymous data is protected by the GDPR

Answer 6

True, it is personal data

Question 7

Is the collection and use of
device dynamic IP addresses to
allow data on a website to be
transferred to the correct
recipient considered personal
data? Why or why not?

Answer 7

Yes, because traceable > all IP addresses are personal data by definition