5.1 GDPR Basics — Scope & PrinciplesQuiz

1.

Which GDPR principle requires organisations to be able to prove they are following all the other principles?

2.

A company collects customer names, email addresses, purchasing history, browsing behaviour, social media activity, and device fingerprints for processing an order. Which principle is most at risk?

3.

A US-based e-commerce company sells products to customers in Germany. Which statement is correct?

4.

An online health service collects users' email addresses for account login and then uses the same emails to send marketing newsletters without asking. Which principle dös this most directly violate?

5.

How many core data protection principles dös GDPR Art. 5 establish?

6.

In your own words, explain the significance of the GDPR's extraterritorial scope under Art. 3. Why dös it matter for people outside the EU?