Q1 Select ALL statements that are true about the Data Protection Officer.

a. A DPO can be an employee.

b. A DPO can not be someone from outside the organisation that process data.

c. None of the options.

d. If a company has a Compliance department, the DPO should report to it instead of the highest management level.

e. A DPO is the main contact with supervisory authorities.

Q2 Select ALL that true statements about GDPR

a.

The accountability principle let data processors and controllers decide and justify on how to implement data protection policies.

b.

None of the options.

c.

The IPO(Intellectual Property Office) is responsible for regulating data protection.

d.

Processing data includes storing, analysing, combining and using it.

e.

GDPR uses an approach where all the rules are clearly defined and you must comply to them.