QCM : Employee Data Management and Compliance — 9 questions

Questions et réponses du QCM

1. What is the primary purpose of a personalakte in HR management?

To store all employment-related documents of an employee
To keep track of employee attendance and punctuality
To serve as a legal document for criminal records
To record only salary and payment details

To store all employment-related documents of an employee

Explication

The personalakte is a collection of all employment-related documents, including contracts, evaluations, certificates, and other relevant information, used for HR management and legal compliance.

2. What is contained within a personalakte?

Only employment contracts and salary information
A collection of all employment-related documents including personal details, employment history, education, remuneration, and employment documents
Only personal data and health records
Only documents related to employee disciplinary actions

A collection of all employment-related documents including personal details, employment history, education, remuneration, and employment documents

Explication

The personalakte includes comprehensive employment-related documents such as personal details, employment history, education, remuneration, and relevant employment documents, not just contracts or salary info.

3. Under GDPR, which of the following data categories is considered sensitive and requires special handling?

Date of birth and nationality
Employment start date
Health information and religion
Name and address

Health information and religion

Explication

Sensitive data includes health information, religion, and criminal records, which require additional protection and handling measures under GDPR due to their sensitive nature.

4. Under the GDPR, when is a data protection officer (DPO) mandatory in a company?

When the company employs more than 50 employees regardless of data processing type
If the company processes automated (digital) data and has 10 or more employees or processes non-automated data with 20 or more employees
Only when the company processes sensitive data like health or religion
Whenever the company has more than 5 employees handling any personal data

If the company processes automated (digital) data and has 10 or more employees or processes non-automated data with 20 or more employees

Explication

A DPO is required if a company processes automated data with at least 10 employees or non-automated data with at least 20 employees, as specified in data protection law.

5. When is a company legally required to appoint a data protection officer according to the course summary?

When they process more than 10 employees' automated data or more than 20 employees' manual data
When they have more than 50 employees in total
When they process any personal data regardless of size
Only if they operate in the healthcare sector

When they process more than 10 employees' automated data or more than 20 employees' manual data

Explication

A data protection officer must be appointed if a company processes automated personal data of 10 or more employees or manual data of 20 or more employees, to ensure compliance with data protection laws.

6. Which of the following is an example of a data protection measure (TOM) to prevent unauthorized access?

Publishing employee data on the company's intranet for transparency
Implementing access controls and encryption for sensitive data
Sharing passwords among HR staff for convenience
Allowing unrestricted access to all employees to the personalakte

Implementing access controls and encryption for sensitive data

Explication

Technical and Organizational Measures (TOMs) include safeguards like access controls and encryption to protect data privacy and security, unlike sharing passwords or unrestricted access.

7. Which law primarily governs data protection across the entire European Union?

The BDSG (German Federal Data Protection Act)
The GDPR (EU General Data Protection Regulation)
The Federal Employee Data Law
The Data Security Act of 2010

The GDPR (EU General Data Protection Regulation)

Explication

The GDPR (EU-DSGVO) is the primary data protection regulation applicable throughout the European Union, setting uniform standards.

8. What is the main purpose of the Betriebsrat (works council) in data management?

To process employee data independently
To collaborate on data security measures and monitor their implementation
To replace the employer in data-related legal responsibilities
To directly control and access employee personal data at will

To collaborate on data security measures and monitor their implementation

Explication

The Betriebsrat collaborates with employers to ensure data security and monitors the implementation of data protection measures, not to independently process or control data.

9. Which data category requires higher protection and specific handling under data protection law?

Personal data such as name and address
Sensitive data such as health, religion, or criminal records
Employment start and end dates
Remuneration information

Sensitive data such as health, religion, or criminal records

Explication

Sensitive data like health, religion, and criminal records require higher protection and specific handling according to data protection regulations, due to their sensitive nature.

Révisez avec les flashcards

Mémorisez les réponses avec 10 flashcards sur Employee Data Management and Compliance.

Personalakte — definition?

Collection of employment-related documents

Personalakte — definition?

All employment-related documents collection.

GDPR — scope?

Protects personal data in EU and third countries

Voir les flashcards →

Approfondir avec la fiche

Consultez la fiche de révision complète sur Employee Data Management and Compliance.

Voir la fiche →

Cours similaires

Crée tes propres QCM

Importe ton cours et l'IA génère des QCM avec corrections en 30 secondes.

Générateur de QCM