UK GDPR

UK GDPR Practitioner

Name: EuroCompliant AI Compliance Copilot
Price: 299 EUR
Author: EuroCompliant

Divergence between UK GDPR and EU GDPR, ICO guidance, and practical compliance for UK-facing organisations.

12 questions · 75% to pass · free

eurocompliant.com is not an accredited certification body. This is a self-paced educational assessment; the certificate confirms completion only, not a professional, statutory, or accredited qualification.

Your details

Name *

Email *

We'll email your certificate here if you pass. We may occasionally follow up about eurocompliant.com - you can unsubscribe any time.

Question 1 of 12

Which of the following are ways the UK GDPR framework can diverge from the EU GDPR over time?

Select all that apply.

Post-Brexit reform legislation adjusting specific UK provisionsThe Data Protection Act 2018's UK-specific exemptionsThey can never diverge under any circumstancesUK-specific secondary legislation and ICO guidance

Question 2 of 12

What happens to the EU's adequacy decision for the UK if the UK's data protection standards are assessed as diverging significantly from the EU's?

It is subject to periodic review and could in principle be revoked, affecting EU-to-UK transfersIt only affects transfers from the UK to the EU, not the reverseIt is permanent and can never be reviewedIt automatically renews with no review process

Question 3 of 12

An organisation transfers personal data from the UK to a country without a UK adequacy regulation. What is a valid transfer mechanism?

Converting the data to a spreadsheetNo mechanism is needed for any third countryThe International Data Transfer Agreement (IDTA) or the UK Addendum to the EU SCCsSimply relying on the recipient's promise, without any contractual instrument

Question 4 of 12

Under the Data Protection Act 2018, which of the following is a recognised exemption category?

Processing for the purposes of the prevention or detection of crime, subject to conditionsA blanket exemption for all private companiesAn exemption for any data over 10 years oldExemptions never exist under UK law

Question 5 of 12

The ICO can issue fines but has no power to conduct compulsory audits or issue enforcement notices.

TrueFalse

Question 6 of 12

How does the UK GDPR treat 'special category data' compared to the EU GDPR?

It expands special category data to include all financial informationIt retains the same core categories (e.g. health, racial/ethnic origin) with UK-specific conditions in the DPA 2018It only applies to criminal dataIt removes the concept entirely

Question 7 of 12

What is the ICO's general expectation for organisations regarding accountability documentation (e.g. RoPA, DPIAs)?

Broadly equivalent expectations to the EU GDPR, adapted through ICO guidanceDocumentation is only required if requested by a courtDocumentation is only required for public bodiesNo documentation is required under UK law

Question 8 of 12

A UK organisation with no EU establishment offers services to individuals in France. Which regime(s) potentially apply?

UK GDPR only, since the organisation is UK-basedOnly French national law, with no EU or UK GDPR relevanceNeither regime appliesBoth the UK GDPR and, if targeting EU data subjects, the EU GDPR extraterritorially

Question 9 of 12

What is the effect of the UK Addendum when used together with the EU's Standard Contractual Clauses?

It replaces the SCCs entirely with a new UK-only textIt has no legal effect and is purely informationalIt only applies to transfers of employee dataIt modifies the EU SCCs so they can be used to lawfully cover a restricted transfer from the UK

Question 10 of 12

Which UK regulator's role most closely parallels the EDPB's role of coordinating supervisory authorities across the EU?

The CMAThe ICO has no equivalent counterpart function since the UK left the EU's one-stop-shop mechanismThe FCAThe Bank of England

Question 11 of 12

If a UK organisation suffers a breach affecting both UK and EU data subjects, what is generally required?

Notification to the ICO only, with no consideration of EU obligationsNotification only if more than 10,000 people are affectedPotentially notifying both the ICO and the relevant EU supervisory authority/authorities depending on where the EU GDPR also appliesNo notification is required in either jurisdiction

Question 12 of 12

UK GDPR fines are calculated using the same two-tier structure (a lower and a higher maximum) as the EU GDPR, just denominated in GBP instead of EUR.

TrueFalse

0 of 12 answered