100% Free PDP9 Practice Exam Questions and Answers

Stay Ahead with Latest PDP9 Business Analysis Practice Test Questions 2026

Page: 1 / 8

Total 40 Questions | Updated On: Oct 26, 2026

Add To Cart

Question 1

When does a personal data breach need to be reported to a supervisory authority?

A : All personal data breaches must be reported to a supervisory authority

B : Only where a disclosure is of special category data

C : Where the personal data breach is likely to result in a risk to the rights and freedoms of natural persons.

D : When the controller's right of freedom of expression outweighs the data subject's right to a private home and family life

Answer: C

Question 2

A UK public body has a security breach, in which the details of a hundred thousand members of the public are published What is the MAXIMUM fine that they could receive for this breach?

A : £17 5 million or 4% of gross annual turnover

B : £10 million or 4% of gross annual turnover

C : £20 million or 2% of gross annual turnover

D : £8.7 million or 2% of gross annual turnover

Answer: A

Question 3

What factors should be considered when looking at security of processing under Article 32 of the GDPR? Select the INCORRECT answer

A : Lawfulness of processing

B : The most secure option available

C : The likelihood of a risk to the rights of the data subjects

D : Adherence to an approved code of conduct

Answer: A

Question 4

A UK public body has a security breach, in which the details of a hundred thousand members of the public are published What is the MAXIMUM fine that they could receive for this breach?

A : £17 5 million or 4% of gross annual turnover

B : £10 million or 4% of gross annual turnover

C : £20 million or 2% of gross annual turnover

D : £8.7 million or 2% of gross annual turnover

Answer: A

Question 5

When does a personal data breach need to be reported to a supervisory authority?

A : All personal data breaches must be reported to a supervisory authority

B : Only where a disclosure is of special category data

C : Where the personal data breach is likely to result in a risk to the rights and freedoms of natural persons.

D : When the controller's right of freedom of expression outweighs the data subject's right to a private home and family life

Answer: C

Page: 1 / 8

Total 40 Questions | Updated On: Oct 26, 2026

Add To Cart