Level 3 exam — Legal & Compliance

Exam — fresh questions

12 questions to validate compliance: GDPR, register, rights and consent, anticorruption, breaches and penalties.
Answer everything, then click Check: your score and explanations will appear.

3.1 · Recall

1. Personal data means…

A trade secret (not a person) Any information about an identifiable person Only a family name (too narrow) A company's data (a legal entity)

A very broad concept (name, email, IP, photo…); sensitive data has extra protection.

3.1 · Application

2. Yacine creates a prospect file 'just in case', with no purpose. What should he do?

Keep it 'just in case' (with no purpose) Resell it quickly (even worse, unlawful) Define a purpose and a basis, otherwise delete it Hide it from the register (concealment, never)

No processing without a legal basis or purpose; minimisation.

3.1 · Arbitration

3. Yacine has no contacts in the EU. Which statement is FALSE?

He must check his country's law He is necessarily subject to the GDPR Law 18-07 may apply in Algeria The principles remain similar

Outside the EU, local law comes first; the GDPR applies on top if EU data is involved.

3.2 · Arbitration

4. What is the centrepiece of data compliance?

Antivirus software (a tool, not the central proof) The processing register (the proof) An employment contract (HR, not data) The website (a channel, not the register)

It records purpose, data, legal basis, recipients, retention periods, security.

3.2 · Application

5. Yacine, a small business: must he deploy a multinational's system?

No: a simple table is enough, proportionate Yes, a full department in all cases No, no register is ever useful Yes, with a mandatory external audit straight away

Proportionate compliance: the core for everyone, heavy systems case by case.

3.3 · Recall

6. Valid consent must be…

Implied and pre-ticked (not a positive act) Bundled with everything else (not specific) Free, specific, informed, unambiguous and revocable Given once and for all (no withdrawal)

An active unticked box; withdrawal as easy as giving consent.

3.3 · Application

7. Yacine wants to prospect with a purchased list, no unsubscribe. What to say?

Fine among business friends (not a valid basis) No: prior consent and an unsubscribe option Great idea, cheap (risky, no) No legal risk (false, there is)

Especially towards individuals: opt-in + unsubscribe; spam also harms reputation.

3.3 · Arbitration

8. A customer asks for total erasure, but an invoice must be kept. What to do?

Ignore the request (never ignore a right) Refuse outright without explaining (opaque, no) Delete what can be deleted, explain what must be kept Erase everything blindly (even statutory records)

The right to erasure has exceptions: legal obligations, contract, disputes.

3.4 · Arbitration

9. What is corruption?

A tracked, fair discount (not undue) A scheduling conflict (not an undue advantage) A modest, transparent gift (acceptable) Offering or accepting an undue advantage to obtain a favour

Prohibited, heavily punished; also a reputational risk.

3.4 · Application

10. A supplier offers a costly advantage during a call for tenders. What reflex?

Apply the publicity test and refuse Ask for more (aggravating, no) Hide it from the records (concealment, never) Accept it discreetly (opaque, highly suspicious)

Value, timing, recipient, transparency: 'comfortable if public?'.

3.5 · Application

11. Yacine sends a customer file to the wrong recipient. First reflex?

Change nothing (leave the leak open) Conceal the leak (the worst choice, never) Wait and see (waste precious time) Contain, document, assess, then notify

React fast and without concealment; notify the authority within a short deadline if at risk.

3.5 · Arbitration

12. What is the best protection against incidents and penalties?

Proportionate prevention, up-to-date compliance Hoping never to be inspected (hiding, risky) Provisioning a large fine (enduring, not preventing) Ignoring the topic (negligence is costly)

Security, minimisation, up-to-date register; good faith and cooperation affect the penalty.

What's next?

Score ≥ 80%: move on to Level 4 — V3 (trademarks, copyright, website legal notices, e-commerce contracts, AI and data).
Score < 80%: revisit the sections you missed (register 3.2, consent 3.3, response 3.5), re-read the explanations above, then retake the test.