ExamDumpster

Free FC-DP sample questions

Real questions from the BCS Foundation Certificate in Data Protection practice bank, with the correct answer and an explanation for each one. No junk, no filler.

Try them in the simulator Same questions, with study, timed and flashcard modes.

Showing 6 of 12 free sample questions.

Question 1Choose one

A UK-based healthcare research organization is evaluating its compliance framework in light of the Data (Use and Access) Act 2025 (DUA Act). They want to understand how this new legislation interacts with the existing UK GDPR and DPA 2018. Which of the following statements most accurately describes the legal mechanism by which the DUA Act 2025 alters the UK's data protection landscape?

Question 2Choose one

True or False: Under Article 3 of the UK GDPR, a software company headquartered exclusively in Singapore that actively targets and sells its project management application in GBP to consumers residing in the UK is subject to the UK GDPR, despite having no physical establishment or servers within the UK.

Question 3Choose 2

Select TWO statements that correctly reflect the UK's data protection framework following its exit from the European Union. (Select TWO)

Question 4Choose one

An e-commerce enterprise replaces direct customer identifiers (like names and emails) in its analytics database with randomly generated reference numbers. The mapping table linking these numbers back to the original identities is stored securely on a separate, heavily encrypted server with strict access controls. How does the UK GDPR classify the data in the analytics database?

Question 5Choose one

"HealthTech Solutions" provides a cloud-based patient management system to "City General Hospital". The Hospital decides what patient data is collected, sets the retention periods, and uses the system to manage daily appointments. HealthTech Solutions decides which cloud infrastructure to use (Microsoft Azure), handles routine software maintenance, and applies security patches without altering the data's purpose. Under the UK GDPR, what are the respective roles of these entities?

Question 6Choose one

Which of the following data points collected by a fitness tracking mobile application is explicitly classified as "special category data" under Article 9 of the UK GDPR?

6 more free samples are waiting

Create a free account to unlock the whole FC-DP sample bank, or get full access to all 135 practice questions in the simulator.

Create account