OneTrust Certified Privacy Professional Practice Exam

Disable ads (and more) with a membership for a one time $2.99 payment

Prepare for the OneTrust Certified Privacy Professional Exam with detailed questions and explanations. Utilize flashcards and comprehensive MCQs to ensure you're ready to excel in your certification journey.

Each practice test/flash card set has 50 randomly selected questions from a bank of over 500. You'll get a new set of questions each time!

Practice this question and more.


Which of the following are principles of lawful data processing under GDPR?

  1. Lawfulness and Transparency

  2. Fairness and Storage Limitation

  3. All listed options including Accuracy and Purpose Limitation

  4. Only Accuracy and Confidentiality

The correct answer is: All listed options including Accuracy and Purpose Limitation

The principles of lawful data processing under the General Data Protection Regulation (GDPR) encompass several key tenets, and the correct selection reflects the comprehensive nature of these principles. One of the foundational aspects of GDPR is that processing of personal data must adhere to certain principles that ensure the protection of individuals' rights. The selected answer covers the principles of lawfulness, transparency, fairness, accuracy, purpose limitation, and storage limitation. Each of these principles serves a critical function: - **Lawfulness and Transparency** require that data processing is not only legal but also clear to the data subjects about how their data is used. - **Fairness** emphasizes that data processing should be conducted in a way that is fair to individuals and respects their rights. - **Accuracy** ensures that personal data must be kept accurate and up to date to avoid any misrepresentation. - **Purpose Limitation** dictates that data must only be collected and processed for legitimate, specified purposes and not further processed in a way that is incompatible with those purposes. - **Storage Limitation** requires that personal data is not kept longer than necessary for the purposes for which it is processed. Thus, the mention of "all listed options" acknowledges the comprehensive nature of GDPR's principles surrounding lawful data