Online Safety 101: Take The Ultimate Data Privacy Quiz

Denying data access requests

Providing data access upon request

Collecting data without consent

Ignoring data subject requests

Any data that alone, or in combination with other information, can identify an individual.

Historical information published about a monument.

Any information of an employee.

Information or data that is stored in a vault.

Ensure data is public

Avoid collecting sensitive data

Inform individuals of data usage

Collect data without consent

Once a week.

Once a month.

In accordance with your organization’s backup policy and the criticality of the data in question.

Once a fortnight.

Pass it on to someone else.

Give it back to the owner.

Securely delete or destroy it.

Throw it out.

Storing personal data

Collecting personal data

Publicly displaying data

Analyzing data for insights

Public sharing of information

Using strong encryption

Ignoring data security policies

Limiting access to personal data

Banks and finance companies who process a lot of payments.

Any organization or individual is liable to be the victim of hackers.

Companies which hold a lot of proprietary information.

Companies which hold credit card numbers of customers.

Memorize it

Use a reputable password manager that supports offline storage

Store it in a secure, off-site location, such as a safety deposit box

Use a physical security key (like a YubiKey) to store and apply the passphrase

Not collect personal information indiscriminately.

Not deceive or mislead individuals about the purposes for collecting personal.

Limit the amount and type of information you collect to what is needed for the identified purposes.

All of the above

To protect people's personal information.

To help police, doctors, the army, etc., to get information.

To help everyone find information.

All of the above.

20,000,000 euros or up to 4% of annual turnover, whichever is greater.

10,000,000 euros or up to 1% of annual turnover, whichever is greater.

5,000,000 euros, job suspension, and imprisonment for up to 5 years.

There is no maximum fine.

Information Commissioner

Data Controller

Data Subject

Data User

Address

CCTV Video

Name

Religion

5

6

7

8

Bad spelling, poor syntax, and grammar are some of the tell-tale signs of a fake email.

Look at the email headers to see where it really came from.

Look for poorly replicated logos.

Contact the sender on some other medium besides email to verify whether they sent you the email.

Within 48 hours

Within 12 hours

Within 24 hours

Within 72 hours

Physical measures, for example, shredding documents and locking desk drawers.

Organizational measures, for example, security clearances and limiting access on a “need-to-know” basis.

Technological measures, for example, the use of passwords and encryption.

All of the above

Any organization that processes personal data

All data controllers and processors established in the EU and organizations that target EU resident

Data controllers operating in the EU

All of the above

Individuals who collect data

Individuals who analyze and interpret data

Individuals who create data

Individuals who utilize or consume data

Using easily guessable passwords like "password123"

Writing your passwords down on a sticky note that you keep near your computer.

Changing your passwords on a regular basis, such as every three-to-six months.

Both using easily guessable passwords and writing your passwords down on a sticky note