GDPR

GDPR Essentials

Name: eurocompliant.com AI Compliance Copilot
Price: 299 EUR
Author: eurocompliant.com

Test your understanding of the GDPR (Regulation (EU) 2016/679) — lawful bases, data subject rights, breach notification, and accountability.

10 questions · 70% to pass · free

eurocompliant.com is not an accredited certification body. This is a self-paced educational assessment; the certificate confirms completion only, not a professional, statutory, or accredited qualification.

Your details

Name *

Email *

We'll email your certificate here if you pass. We may occasionally follow up about eurocompliant.com - you can unsubscribe any time.

Question 1 of 10

What does GDPR stand for?

Government Data Privacy RulesGeneral Data Protection RegulationGeneral Data Privacy RegistrationGlobal Data Protection Regulation

Question 2 of 10

Which of the following is NOT one of the lawful bases for processing personal data under Article 6?

Convenience for the organisationLegitimate interestConsentContractual necessity

Question 3 of 10

Within how many hours must a controller normally notify a personal data breach to the supervisory authority, where feasible?

72 hours30 days7 days24 hours

Question 4 of 10

What is a 'data subject' under the GDPR?

An identified or identifiable natural person whose personal data is processedA government regulatorAny company that processes personal dataA database administrator

Question 5 of 10

Which of the following is a data subject right under GDPR?

The right of access to one's own personal dataThe right to demand a competitor's dataThe right to prevent all companies from ever contacting them by any meansThe right to unlimited free copies of any company's internal documents

Question 6 of 10

What is a Record of Processing Activities (RoPA), required under Article 30?

A record that documents an organisation's personal data processing activitiesA financial audit reportA criminal record check for employeesA marketing brochure

Question 7 of 10

When is a Data Protection Impact Assessment (DPIA) typically required?

When processing is likely to result in a high risk to individuals' rights and freedomsNever — DPIAs were removed in a 2020 amendmentFor every single processing activity, no matter how minorOnly for organisations with fewer than 10 employees

Question 8 of 10

What is the maximum GDPR fine for the most serious infringements?

A fixed EUR 1,000 per incidentEUR 500,000 flat feeEUR 20 million or 4% of global annual turnover, whichever is higherThere is no maximum — fines are unlimited

Question 9 of 10

What does 'data minimisation' mean under Article 5?

Storing as much data as possible for future useDeleting all data immediately after collectionPersonal data must be adequate, relevant, and limited to what is necessary for the purposeCompressing data files to save storage space

Question 10 of 10

Under what circumstance must an organisation appoint a Data Protection Officer (DPO)?

Only if the organisation has over 10,000 employeesOnly for organisations based outside the EUNever — DPOs are always optionalWhen core activities require regular and systematic monitoring of data subjects on a large scale, among other triggers

0 of 10 answered