UK GDPR

UK GDPR Basics

Name: eurocompliant.com AI Compliance Copilot
Price: 299 EUR
Author: eurocompliant.com

How the UK GDPR and Data Protection Act 2018 work post-Brexit: lawful bases, principles, and the ICO's role.

10 questions · 70% to pass · free

eurocompliant.com is not an accredited certification body. This is a self-paced educational assessment; the certificate confirms completion only, not a professional, statutory, or accredited qualification.

Your details

Name *

Email *

We'll email your certificate here if you pass. We may occasionally follow up about eurocompliant.com - you can unsubscribe any time.

Question 1 of 10

What is the UK GDPR?

The retained, UK-specific version of the EU GDPR, sitting alongside the Data Protection Act 2018An EU regulation that still directly applies in the UK unchangedA voluntary code with no legal forceA regulation that only applies to UK government bodies

Question 2 of 10

Which UK body is the supervisory authority responsible for enforcing data protection law?

Financial Conduct Authority (FCA)Competition and Markets Authority (CMA)Information Commissioner's Office (ICO)HM Revenue & Customs (HMRC)

Question 3 of 10

Since Brexit, transfers of personal data from the UK to the EU are generally covered by what?

A total transfer banAn EU adequacy decision recognising the UK's data protection standardsOnly Standard Contractual Clauses, with adequacy never grantedNo mechanism at all

Question 4 of 10

Article 5 and 6 lawful bases under the UK GDPR mirror which regulation?

DORAThe US CCPANIS2The EU GDPR

Question 5 of 10

What UK-specific instrument supplements the UK GDPR for matters like exemptions and enforcement?

The Equality Act 2010The Companies Act 2006The Data Protection Act 2018The Bribery Act 2010

Question 6 of 10

Under the UK regime, what is the ICO's international data transfer mechanism equivalent to the EU's SCCs called?

The Brexit Transfer NoticeThe Universal Consent FormThe International Data Transfer Agreement (IDTA)The GDPR Passport

Question 7 of 10

What is the general maximum fine tier under the UK GDPR for the most serious infringements?

GBP 1,000 per data subject affectedA flat GBP 500 fineThere is no maximumGBP 17.5 million or 4% of global annual turnover, whichever is higher

Question 8 of 10

What must UK organisations do when appointing a representative if they are established outside the UK but offer goods/services to UK data subjects?

Appoint an EU-based representative insteadNothing — this only applies to EU-based organisationsRelocate their headquarters to the UKDesignate a UK representative in most cases

Question 9 of 10

Which right allows a UK data subject to obtain a copy of their personal data held by an organisation?

The right of accessThe right to erasureThe right to rectification onlyThe right to object

Question 10 of 10

Within what timeframe must the ICO generally be notified of a qualifying personal data breach, where feasible?

30 days72 hoursThere is no deadline7 days

0 of 10 answered