Complete the sentence to identify a key GDPR principle.
GDPR requires that personal data must be processed [1] and fairly.
GDPR mandates that personal data must be processed lawfully and fairly to protect individuals' rights.
Complete the sentence about data subject rights under GDPR.
Under GDPR, individuals have the right to [1] their personal data held by organizations.GDPR gives individuals the right to request deletion of their personal data, known as the 'right to be forgotten'.
Fix the error in the GDPR data breach notification rule.
Organizations must notify the supervisory authority within [1] hours of becoming aware of a personal data breach.GDPR requires notification within 72 hours (3 days) of discovering a personal data breach.
Fill both blanks to complete the GDPR data minimization principle.
Personal data collected must be [1] and [2] to what is necessary for the purpose.
GDPR requires data to be adequate and relevant, meaning only what is necessary should be collected.
Fill all three blanks to complete the GDPR accountability requirements.
Organizations must implement [1], maintain [2], and demonstrate [3] with GDPR rules.
GDPR accountability means organizations must have technical measures, keep records, and show compliance with the law.