Official Bank 0/149

Privacy and Data Protection Foundation Exam (PDPF) - Exin Exam Questions

Last updated on June 20, 2026

97% Exam Compliance
149 Total Questions
1
Question
Which of the options below is classified as a personal data breach under the GDPR?
Options
A A server is attacked and exploited by a hacker.
B Strategic company data is mistakenly shared.
C Data accessed by employees without permission.
D Personal data processed without the consent of the controller.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

2
Question
What is the definition of Supervisory Authority according to the GDPR?
Options
A Individual or legal entity that is not authorized to process personal data
B Individual or legal entity that, individually or in conjunction with others, determines the purposes and means of processing personal data.
C Individual or legal entity processing personal data on behalf of the person responsible for processing personal data.
D An independent public authority created by a Member State.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

3
Question
Which option below defines correctly data protection by design (from conception)?
Options
A Only data that is required for processing should be processed
B It’s a methodology about how the data should be collected
C It’s a methodology of data protection according to its form
D It’s a concept that demonstrates the need to protect data since the beginning.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

4
Question
The General Data Protection Regulation (GDPR) is based on the principles of proportionality and subsidiarity.

What is the meaning of “proportionality” in this context?
Options
A Personal data must be adequate, relevant and not excessive in relation to the purposes.
B Personal data can only be processed if there are no other means to achieve the purposes.
C Personal data can be processed according to the use of requirements.
D Personal data cannot be reused without explicit and informed consent.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

5
Question
An architect, leaving a building site, puts his laptop for a moment beside his car on the road, while
Reveal Only
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

Finish Practice?

Are you sure you want to finish? This will end your practice session.