Sign in

Free FC-DP sample questions

Real questions from the BCS Foundation Certificate in Data Protection practice bank, with the correct answer and an explanation for each one. No junk, no filler.

Try them in the simulator Same questions, with study, timed and flashcard modes.

Showing 6 of 12 free sample questions.

Question 1Choose one

True or False: Under Article 3 of the UK GDPR, a software company headquartered exclusively in Singapore that actively targets and sells its project management application in GBP to consumers residing in the UK is subject to the UK GDPR, despite having no physical establishment or servers within the UK.

Question 2Choose 2

Select TWO statements that correctly reflect the UK's data protection framework following its exit from the European Union. (Select TWO)

Question 3Choose one

An e-commerce enterprise replaces direct customer identifiers (like names and emails) in its analytics database with randomly generated reference numbers. The mapping table linking these numbers back to the original identities is stored securely on a separate, heavily encrypted server with strict access controls. How does the UK GDPR classify the data in the analytics database?

Question 4Choose one

"HealthTech Solutions" provides a cloud-based patient management system to "City General Hospital". The Hospital decides what patient data is collected, sets the retention periods, and uses the system to manage daily appointments. HealthTech Solutions decides which cloud infrastructure to use (Microsoft Azure), handles routine software maintenance, and applies security patches without altering the data's purpose. Under the UK GDPR, what are the respective roles of these entities?

Question 5Choose one

Which of the following data points collected by a fitness tracking mobile application is explicitly classified as "special category data" under Article 9 of the UK GDPR?

Question 6Choose one

A retail bank originally collected customer email addresses exclusively for the purpose of sending monthly digital account statements. Two years later, the bank's marketing department decides to use this existing email database to send promotional offers for a new credit card product, without obtaining new consent or updating their privacy notice. Which data protection principle has the bank most directly violated?

6 more free samples are waiting

Create a free account to unlock the whole FC-DP sample bank, or get full access to all 135 practice questions in the simulator.

Create account