Legal Framework for Privacy: Essential Knowledge for Media Professionals

Question 1

Which of the following is NOT a fundamental data protection principle enshrined in the General Data Protection Regulation (GDPR)?

Accepted Answer

Freedom of expression

Answer

Lawfulness, fairness, and transparency

Answer

Purpose limitation

Answer

Data minimisation

Question 2

Which of the following is a potential legal remedy for a violation of privacy rights?

Accepted Answer

Injunction

Accepted Answer

Damages

Accepted Answer

Criminal charges

Answer

Public apology

Question 3

What is the primary objective of the GDPR?

Accepted Answer

To protect individuals' personal data and enhance their privacy rights

Answer

To promote economic growth and innovation

Answer

To strengthen national security

Answer

To regulate online content and social media platforms

Question 4

What is the term used to describe individuals' right under the GDPR to access and obtain a copy of their own personal data?

Accepted Answer

Subject access request

Answer

Right to be forgotten

Answer

Right to erasure

Answer

Data portability

Question 5

Under the GDPR, what is the maximum fine that can be imposed on companies for serious violations of the regulations?

Accepted Answer

Up to 4% of the company's global annual turnover

Answer

£10,000

Answer

£500,000

Answer

€20 million

Question 6

Under the GDPR, which of these is a legitimate reason for handling personal information?

Accepted Answer

Consent

Accepted Answer

Legitimate interest

Accepted Answer

Fulfilling a contract

Answer

Custom

Question 7

Which of the following is NOT a fundamental right granted to individuals under the GDPR?

Accepted Answer

Right to compensation for damages

Answer

Right to access personal data

Answer

Right to erasure (right to be forgotten)

Answer

Right to restrict processing

Question 8

Which of the following is NOT considered a potential benefit of complying with data protection laws?

Accepted Answer

Guaranteed increase in sales

Answer

Increased customer trust

Answer

Reduced risk of legal action

Answer

Competitive advantage

Question 9

How has technology's evolution impacted the legal framework governing privacy?

Accepted Answer

Advancements in technology have made it easier to gather and analyze personal data, raising privacy concerns.

Answer

Technological advancements have bolstered privacy protections, making it harder for businesses to obtain personal data.

Answer

Technological advancements have had little effect on the legal framework for privacy.

Question 10

What is the full form of GDPR?

Accepted Answer

General Data Protection Regulation

Answer

Global Data Protection Regulation

Answer

Governmental Data Protection Regulation

Answer

Great Data Protection Regulation

Question 11

Which of the following rights is NOT afforded to individuals under the GDPR?

Accepted Answer

The right to sell their personal data to third parties without restriction

Answer

The right to be informed about the processing of their personal data

Answer

The right to have their personal data rectified if it is inaccurate

Answer

The right to have their personal data erased

Question 12

Which of the following is a fundamental principle of the Data Protection Act 1998?

Accepted Answer

Personal data shall be processed fairly and lawfully

Answer

Personal data can be freely used for any purpose without consent

Answer

Personal data can be processed without the knowledge of the individual

Question 13

Under the General Data Protection Regulation (GDPR), individuals have the right to:

Accepted Answer

Request the erasure of their personal data

Answer

Access their personal data only through a court order

Answer

Sell their personal data to the highest bidder

Answer

Have their personal data permanently destroyed

Question 14

Which of the following is classified as sensitive personal data under the GDPR?

Accepted Answer

Racial or ethnic origin

Answer

Educational qualifications

Answer

Name and address

Answer

Telephone number

Question 15

What is the primary purpose of the Privacy and Electronic Communications Regulations (PECR)?

Accepted Answer

To regulate the use of electronic communications for marketing purposes

Answer

To protect personal data in general

Answer

To prevent cyberbullying

Question 16

Vicarious liability, in the context of data protection, refers to:

Accepted Answer

The liability of an employer for the unlawful acts of their employees committed in the course of employment

Answer

The liability of an individual for the unlawful acts of their spouse

Question 17

What is the primary function of the Information Commissioner's Office (ICO)?

Accepted Answer

To oversee and enforce the Data Protection Act 1998 and the General Data Protection Regulation (GDPR)

Answer

To provide legal advice to businesses on data protection matters

Answer

To investigate complaints about data breaches exclusively

Question 18

Which of the following is a significant challenge in implementing data protection laws in the digital age?

Accepted Answer

The proliferation of social media platforms and online advertising

Answer

The high cost of compliance for small businesses

Answer

The lack of public awareness about data protection laws

Question 19

What is the primary objective of the General Data Protection Regulation (GDPR)?

Accepted Answer

To standardize data protection laws across the European Union

Answer

To solely regulate the use of cookies

Answer

To solely prevent data breaches

Answer

To solely safeguard sensitive data

Question 20

Which of the following rights is NOT granted to individuals under the GDPR?

Accepted Answer

The right to trade in personal data

Answer

The right to object to processing

Answer

The right to be forgotten

Answer

The right to access personal data

Question 21

What is the appropriate term used in the context of the GDPR to describe the legal justification for processing personal data?

Accepted Answer

Lawful basis

Answer

Legitimate interest

Answer

Legal authority

Answer

Informed consent

Question 22

Which of the following would be considered an example of sensitive personal data under the GDPR?

Accepted Answer

Political opinions

Answer

Email address

Answer

Name

Question 23

What is the primary purpose of conducting a data protection impact assessment (DPIA)?

Accepted Answer

To identify and address risks associated with the processing of personal data

Answer

To simply document how personal data is processed

Answer

To solely obtain consent from individuals

Answer

To solely ensure compliance with the GDPR