Free Practice BCS PDP9 Exam Questions 2025

Stay ahead with 100% Free BCS Practitioner Certificate in Data Protection PDP9 Dumps Practice Questions

Page: 1 / 8

Total 40 Questions | Updated On: Apr 23, 2025

Add To Cart

Question 1

A UK public body has a security breach, in which the details of a hundred thousand members of the public are published What is the MAXIMUM fine that they could receive for this breach?

A : £17 5 million or 4% of gross annual turnover

B : £10 million or 4% of gross annual turnover

C : £20 million or 2% of gross annual turnover

D : £8.7 million or 2% of gross annual turnover

Answer: A

Question 2

When does a personal data breach need to be reported to a supervisory authority?

A : All personal data breaches must be reported to a supervisory authority

B : Only where a disclosure is of special category data

C : Where the personal data breach is likely to result in a risk to the rights and freedoms of natural persons.

D : When the controller's right of freedom of expression outweighs the data subject's right to a private home and family life

Answer: C

Question 3

What factors should be considered when looking at security of processing under Article 32 of the GDPR? Select the INCORRECT answer

A : Lawfulness of processing

B : The most secure option available

C : The likelihood of a risk to the rights of the data subjects

D : Adherence to an approved code of conduct

Answer: A

Question 4

When does a personal data breach need to be reported to a supervisory authority?

A : All personal data breaches must be reported to a supervisory authority

B : Only where a disclosure is of special category data

C : Where the personal data breach is likely to result in a risk to the rights and freedoms of natural persons.

D : When the controller's right of freedom of expression outweighs the data subject's right to a private home and family life

Answer: C

Question 5

Which of the following statements are CORRECT about records of processing'?

A It must contain contact details for the Data Protection Officer where applicable.

B It must be submitted to the Information Commissioner's Office following every Data Protection

ImpactAssessment

C It is mandatory for all data processors

D The controller or the processor a mustmakesthe record available to the supervisory authority on request

E. It must contain contact details for the supervisory authority

A : B, C. and D

B : A,C,andE

C : A. C,D, and E

D : A, C,andD

Answer: D

Page: 1 / 8

Total 40 Questions | Updated On: Apr 23, 2025

Add To Cart