PDP9 無料問題集「BCS Practitioner Certificate in Data Protection」

（A）It fulfils a requirement that data protection is carried out by design and default.

（B）It is key to the accountability element of the GDPR.

（C）It is necessary to fulfil the requirement that all DPIAs are submitted to the ICO

（D）It assists in identifying the main risks that may exist in any use of data, so that they can be mitigated

（A）The processor may use the sub-processor without the written authorisation of the controller if the processing is deemed to be low risk.

（B）The processor may use the sub-processor without the written authorisation of the controller if it adheres to an approved code of conduct

（C）The processor must receive prior written authorisation to use the sub-processor

（D）The processor may use the sub-processor without the written authorisation of the controller if the sub-processor signs a contract which reflects the same obligations as the contract with the controller

（A）Details of the right to lodge a complaint with the supervisory authority

（B）The contact details of the controller

（C）The purpose of the processing

（D）Details of the processor's staff

（A）They review DPIAs in cases of unmitigated high risk

（B）Their leadership must change every four years

（C）They must provide each other with mutual assistance

（D）They must operate independently.

（A）This is criminal offence data and therefore under the provisions of the Data Protection Act 2018, there is no obligation to disclose

（B）While the right to inform does not apply in relation to criminal acts, they need to disclose the information as this has not yet been passed to the police.

（C）The legal and professional privilege exemption applies to this information, and therefore the information does not need to be disclosed

（D）They do not need to disclose details of the investigation as they can rely on the crime and taxation exemption on the basis that disclosure would prejudice the investigation