Data Protection Test

Welcome to your e-assessment.

Number of Questions: 25

Time Allowed: 15 minutes.

You are allowed only one (1) attempt.

By clicking Start, you have consented to your personal information being processed in line with DataPro’s Privacy Policy.

Name

Organisation

The storage that comes in different forms including backing up information on removable hard drives or other external storage mediums is referred to as?

Onsite storage

Offsite storage

Input storage

None of the above

None

Which of the following is not a control of compliance?

Correction

Detection

Direction

Circulation

None

A data breach has occurred at your company. The NDPA requires the company to:

Notify the Data Protection Commission within 72 hours in all breach cases

Only notify affected data subjects if the breach involves financial data.

Report the breach to the media to raise public awareness.

Offer affected data subjects free credit monitoring for a limited time.

None

A core objective of the NDPA is to:

Safeguard the rights of individuals regarding their personal data

Encourage unrestricted sharing of personal data

Restrict access to government information

Promote economic growth through data collection

None

A company can rely on a data subject's consent to process their data. However, such consent must be:

Implied by the data subject's continued use of the company's website.

Freely given, specific, informed, and unambiguous

Renewed every year, regardless of the original purpose for data collection

Obtained through pre-checked boxes on online forms.

None

Which of the following is NOT a key principle of data processing under the NDPA?

Transparency: informing individuals about how their data is used.

Purpose limitation: ensuring data is used only for the reason it was collected.

Data minimization: collecting only the data necessary for a specific purpose.

Data maximization: collecting as much data as possible for future uses

None

The primary legislation governing data protection in Nigeria is the:

Freedom of Information Act 2011

National Information Security Act 2022

Nigeria Data Protection Act 2023

Nigerian Privacy Act 2023

None

The NDPA introduces obligations for data controllers in relation to data retention. Organizations must:

Establish clear data retention schedules based on legitimate business needs and legal requirements.

Retain all personal data indefinitely, even if it is no longer necessary.

Obtain annual consent from data subjects for continued data retention

Delete all personal data immediately upon a data subject's request

None

Technical measures are sometimes thought of as the protection of personal data held in ______________________

computers and networks

office cabinet

our head

phones and flash drives

None

Which of the following is not a component of compliance?

Policies

Procedures

Programs

Measures

None

Acting in line with the LETTER and the SPIRIT of laid down rules, regulations, guidelines, standards, laws and codes, conventions; either internal or external is referred to as ______

Policy

Compliance

Control

Audit

None

The Nigeria Data Protection Commission can:

Automatically share personal data with law enforcement agencies without due process

Force individuals to give up their data rights

Investigate complaints of data breaches and enforce compliance with the NDPA

Grant exemptions from the NDPA to any company upon request

None

A key objective of the NDPA is to:

Encourage the sharing of personal data without limitations

Ensure data processing is fair, lawful, and accountable

Restrict access to government information

Promote economic growth through data collection

None

Some common threats when creating a threat list includes the following except

Cabinet check

Computer & network passwords

Data backups

Records of physical assets

None

When confronting threats from spam emails, an effective measure is----------

c. None of the above

c. Access to data backups (onsite/offsite)

a. To implement an email security and filtering system

d. A and B

None

Some of the rights of data subjects include the following except

Objection to Automated decision-making and Profiling

Arrest and prosecution

Restriction of processing

Data portability

None

When can we say data misuse has occurred?

When consumers are unpleasantly surprised about the way they were attended to

When consumers feel that the company should sell goods at a cheaper rate to them

When consumers are unpleasantly surprised that data about them has been collected or that it has been used in new ways

When consumers are unpleasantly surprised that the company’s staff are rude

None

Personal data must be _______, ______ and ______ to what is necessary in relation to the purposes for which they are processed

Transparent, adequate, relevant

adequate, relevant, limited

detailed, relevant, limited

adequate, relevant, complete

None

_________is fundamentally linked to fairness. Its processing is about being clear, open and honest with people from the start about who you are, how and why you use their personal data

Opening up

Transparency

Data display

Audit/sharing information with regulators

None

When considering cybersecurity, what factors should you look at?

System security

All of the above

Online security

Data security

None

The two types of data we have are?

Electronic and soft

Manual and electronic

Manual and hard

Manual and visual

None

Technical measures may sometimes be referred as?

Data Security

Physical Security

System security

Cybersecurity

None

Which of the following is not considered a data subject?

Job seekers

Vendors

Customers

Consumers

None

Which of these is not a factor to look at when considering physical security?

how to engage security men in searching for stolen items

the quality of doors and locks, and the protection of your premises by such means as alarms or CCTV

how you keep IT equipment, particularly mobile devices are secure

how you control access to your premises, and how visitors are supervised

None

Who is typically tasked with driving company-wide compliance with NDPA at an organization?

Legal

Data Protection Compliance Organisation

Data Protection Officer

Compliance Officer

None

1 out of 25

Time's up

Time is Up!

Title