20:00Min. left

PDF|

Guide for PDP9: BCS Practitioner Certificate in Data Protection

Quiz PDP9: BCS Practitioner Certificate in Data Protection

Updated on 2026/06/08

PDF|

Guide for PDP9: BCS Practitioner Certificate in Data Protection

Updated on 2026/06/08

Randomized | 10 Questions per Test | 20 Minutes | 70% to pass

Learning Mode

Free Test

Question: / 10

20:00Min. left

Question: / 10

0.0

Quiz

Question 1/101/10

Who is entitled to a private life by law in the UK?

Select the answer:Select the answer

1 correct answer

All individuals.

All individuals save for Members of Parliament

Private individuals who do not conduct their business on public platforms (such as professional sports people and actors

Nobody

Quiz

Question 2/102/10

When were data protection rights first introduced into UK law'?

Select the answer:Select the answer

1 correct answer

2000 (Data Protection Act 1998)

1992 (Data Protection Act 1992).

1984 (Data Protection Act 1984).

2018 (Data Protection Act 2018)

Quiz

Question 3/103/10

A company has twenty retail outlets in France and thirty retail outlets in Belgium The payroll
department and the Data Protection Officer are based in Poland. The Company Board and
administrative functions are based in Germany. Determine where the company's 'main
establishment' would be

Select the answer:Select the answer

1 correct answer

Belgium

France

Germany

Poland

Quiz

Question 4/104/10

Under which circumstances can the 'domestic purposes' exemption be used to justify non-
compliance with the Data Protection Act 2018?
A) An individual sells make up products for commission and uses social media to promote products
to friends and family
B) A couple are planning their daughter's wedding and use excel to store contact details and dietary
needs of the guests
C) An individual employs a babysitter and stores her bank details in an encrypted document in order
to make payments
D) A pansh council keeps a spreadsheet to manage bookings of the village hall, it contains only
contact information and time slots
E) A group of students are arranging a house party and using social media to invite people that they
do and do not know

Select the answer:Select the answer

1 correct answer

A, B, C, and E.

B. C. D, and E

B, and C

A. B.C. and D

Quiz

Question 5/105/10

What is the meaning of storage limitation in relation to UK GDPR Article 5 (1 )(e)?

Select the answer:Select the answer

1 correct answer

Keeping identifiable personal data for no longer than is necessary for the intended processing

Storing data in a secure format only permitting access to those with a business need

Only storing data in locations within the EU. except where there is an adequacy decision.

Limiting the number of records stored in any single repository to minimise risk surface.

Quiz

Question 6/106/10

Which of the below would be the BEST example of processing that could utilise the Public Interest
Task lawful basis?

Select the answer:Select the answer

1 correct answer

A health authority processing the personal information of its staff in order to record all training undertaken

A debt collection agency processing information relating to unpaid fines for misuse of community council car parking.

A local authority processing the personal information of the person responsible for paying council tax

A tax authority drops cookies on the devices of visitors to its website

The public interest task lawful basis applies to the processing of personal data that is necessary for
the performance of a task carried out in the public interest or in the exercise of official authority
vested in the controller. The relevant task or authority must have a clear basis in domestic law, such
as a statutory power, a common law duty, or a function of the Crown, central or local government.
The processing must also be necessary, meaning that there is no reasonable and less intrusive way to
achieve the same purpose. The public interest task lawful basis is most relevant to public authorities,
but it can also apply to any organisation that exercises official authority or carries out tasks in the
public interest. In scenario C, a local authority processing the personal information of the person
responsible for paying council tax is likely to rely on the public interest task lawful basis, as it is
performing a task in the public interest that is laid down by law, namely the Local Government
Finance Act 1992, and the processing is necessary for the collection and administration of council tax.
In contrast, scenarios A, B and D are less likely to qualify for the public interest task lawful basis, as
they do not involve a clear task or authority that is set out in law, or that serves the public interest.
For example, a health authority processing the personal information of its staff in order to record all
training undertaken may have a different lawful basis, such as legitimate interests or contractual
necessity. A debt collection agency processing information relating to unpaid fines for misuse of
community council car parking may not have any official authority or public interest justification for
its processing. A tax authority dropping cookies on the devices of visitors to its website may not be
able to demonstrate that the processing is necessary for its official functions, and may also need to
comply with the Privacy and Electronic Communications Regulations (PECR) for the use of
cookies. Reference:
UK GDPR, Article 6 (1) (e) and (3)8
ICO Guide to Data Protection, Public Task9
Local Government Finance Act 199210

Right Answer: C

Quiz

Question 7/107/10

Article 9(2)(c) of UK GDPR condition of processing special category data in the vital interests of the
data subject is only applicable in which of the following circumstances:

Select the answer:Select the answer

1 correct answer

When another lawful basis applies.

When a data subject is incapacitated

When the data subject is physically unable to be present

When the data subject refuses to consent

Quiz

Question 8/108/10

What is the basis of the accountability and data governance obligation (Article 5 (2) of the GDPR)?

Select the answer:Select the answer

1 correct answer

The controller shall appoint a DPO before carrying out large scale processing

The controller shall be responsible for. and be able to demonstrate compliance with the data protection principles.

Controllers and Processors each have a responsibility to conduct legitimate interests balancing tests before processing data for direct marketing

Processors have overarching responsibility to ensure their processing is compliant

Quiz

Question 9/109/10

Of the following options which is NOT a purpose of carrying out a Data Protection Impact Assessment
(DPIA)?

Select the answer:Select the answer

1 correct answer

It is necessary to fulfil the requirement that all DPIAs are submitted to the ICO

It is key to the accountability element of the GDPR.

It fulfils a requirement that data protection is carried out by design and default.

It assists in identifying the main risks that may exist in any use of data, so that they can be mitigated

Quiz

Question 10/1010/10

You are a consulting Data Protection Officer (DPO) for a holiday resort You have been asked to
conduct a Data Protection Impact Assessment (DPIA) for them in advance of adopting a new HR
management database.
While working through the DPIA, which of the following is NOT a requirement?

Select the answer:Select the answer

1 correct answer

Describe the processing

Sign off and record outcomes.

Identify measures to mitigate the risks

Publish any potential risks in your information notice.

Looking for more questions?Buy now

PDP9: BCS Practitioner Certificate in Data Protection Practice test unlocks all online simulator questions

Thank you for choosing the free version of the PDP9: BCS Practitioner Certificate in Data Protection practice test! Further deepen your knowledge on BCS Simulator; by unlocking the full version of our PDP9: BCS Practitioner Certificate in Data Protection Simulator you will be able to take tests with over 40 constantly updated questions and easily pass your exam. 98% of people pass the exam in the first attempt after preparing with our 40 questions.

BUY NOW

What to expect from our PDP9: BCS Practitioner Certificate in Data Protection practice tests and how to prepare for any exam?

The PDP9: BCS Practitioner Certificate in Data Protection Simulator Practice Tests are part of the BCS Database and are the best way to prepare for any PDP9: BCS Practitioner Certificate in Data Protection exam. The PDP9: BCS Practitioner Certificate in Data Protection practice tests consist of 40 questions and are written by experts to help you and prepare you to pass the exam on the first attempt. The PDP9: BCS Practitioner Certificate in Data Protection database includes questions from previous and other exams, which means you will be able to practice simulating past and future questions. Preparation with PDP9: BCS Practitioner Certificate in Data Protection Simulator will also give you an idea of the time it will take to complete each section of the PDP9: BCS Practitioner Certificate in Data Protection practice test . It is important to note that the PDP9: BCS Practitioner Certificate in Data Protection Simulator does not replace the classic PDP9: BCS Practitioner Certificate in Data Protection study guides; however, the Simulator provides valuable insights into what to expect and how much work needs to be done to prepare for the PDP9: BCS Practitioner Certificate in Data Protection exam.

BUY NOW

PDP9: BCS Practitioner Certificate in Data Protection Practice test therefore represents an excellent tool to prepare for the actual exam together with our BCS practice test . Our PDP9: BCS Practitioner Certificate in Data Protection Simulator will help you assess your level of preparation and understand your strengths and weaknesses. Below you can read all the quizzes you will find in our PDP9: BCS Practitioner Certificate in Data Protection Simulator and how our unique PDP9: BCS Practitioner Certificate in Data Protection Database made up of real questions:

Info quiz:

Quiz name:PDP9: BCS Practitioner Certificate in Data Protection
Total number of questions:40
Number of questions for the test:50
Pass score:80%

You can prepare for the PDP9: BCS Practitioner Certificate in Data Protection exams with our mobile app. It is very easy to use and even works offline in case of network failure, with all the functions you need to study and practice with our PDP9: BCS Practitioner Certificate in Data Protection Simulator.

Use our Mobile App, available for both Android and iOS devices, with our PDP9: BCS Practitioner Certificate in Data Protection Simulator . You can use it anywhere and always remember that our mobile app is free and available on all stores.

Our Mobile App contains all PDP9: BCS Practitioner Certificate in Data Protection practice tests which consist of 40 questions and also provide study material to pass the final PDP9: BCS Practitioner Certificate in Data Protection exam with guaranteed success. Our PDP9: BCS Practitioner Certificate in Data Protection database contain hundreds of questions and BCS Tests related to PDP9: BCS Practitioner Certificate in Data Protection Exam. This way you can practice anywhere you want, even offline without the internet.

BUY NOW

Quiz PDP9: BCS Practitioner Certificate in Data Protection

Free Test - Simulator PDP9: BCS Practitioner Certificate in Data Protection

PDP9: BCS Practitioner Certificate in Data Protection Practice test unlocks all online simulator questions

What to expect from our PDP9: BCS Practitioner Certificate in Data Protection practice tests and how to prepare for any exam?