ICHP IG Training Assessment 2026

Quiz Summary

0 of 15 Questions completed

Questions:

You have already completed the quiz before. Hence you can not start it again.

Quiz is loading…

You must sign in or sign up to start the quiz.

You must first complete the following:

Results

Quiz complete. Results are being recorded.

Results

0 of 15 Questions answered correctly

Your time:

You have reached 0 of 0 point(s), (0)

Question 1 of 15

1. Question

What is the definition of personal data under the GDPR?

Any information related to any person, living or dead.
Correct Incorrect Correct answer

Publicly available information about individuals.
Correct Incorrect Correct answer

Any information related to an identified or identifiable natural person.
Correct Incorrect Correct answer

Information that identifies a legal entity such as a company or organisation.
Correct Incorrect Correct answer

Correct

Incorrect
Question 2 of 15

2. Question

Which of the following data protection principles matches this statement best?

“Organisations should keep personal data in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed.”

Data minimisation 
Correct Incorrect Correct answer

Purpose limitation 
Correct Incorrect Correct answer

Lawfulness, fairness and transparency 
Correct Incorrect Correct answer

Storage limitation
Correct Incorrect Correct answer

Correct

Incorrect
Question 3 of 15

3. Question

Which of the following definitions describes a Data Controller?

An individual or organisation that determines the purpose and means of processing personal data.
Correct Incorrect Correct answer

An organisation that processes personal data solely on behalf of another entity’s instructions.
Correct Incorrect Correct answer

An individual or team responsible for securing IT systems that store personal data.
Correct Incorrect Correct answer

The individual to whom the personal data relates.
Correct Incorrect Correct answer

Correct

Incorrect
Question 4 of 15

4. Question

Why is special category data different from other types of personal data?

It involves personal data that is necessary for an organisation’s business operations. 
Correct Incorrect Correct answer

It involves personal data that is exempt from all data protection laws. 
Correct Incorrect Correct answer

It involves any type of data. 
Correct Incorrect Correct answer

It involves specific types of sensitive personal data that require extra protection under data protection laws. 
Correct Incorrect Correct answer

Correct

Incorrect
Question 5 of 15

5. Question

ICHP has collected health data from a patient, John Smith, for an upcoming project. ICHP replaces the name “John Smith” with “Patient 01” in its records. ICHP also retains a separate document that links Patient 01 to John Smith. Is “Patient 01” considered personal data?

No, because the individual’s name has been removed from the data.
Correct Incorrect Correct answer

No, because the database linking patient numbers to names is stored separately.
Correct Incorrect Correct answer

Yes, because the data originated as personal data.
Correct Incorrect Correct answer

Yes, because the individual can still be identified using additional information held by ICHP.
Correct Incorrect Correct answer

Correct

Incorrect
Question 6 of 15

6. Question

In which of the following situations is a Data Protection Impact Assessment (DPIA) required under the UK GDPR?

When the proposed data processing presents a low risk to the rights and freedoms of individuals.
Correct Incorrect Correct answer

Any time personal data is processed.
Correct Incorrect Correct answer

When the proposed data processing presents a high risk to the rights and freedoms of individuals.
Correct Incorrect Correct answer

When only non-personal data is processed.
Correct Incorrect Correct answer

Correct

Incorrect
Question 7 of 15

7. Question

Which of the following rights allows an individual to request that their personal data be deleted?

The right to data portability
Correct Incorrect Correct answer

The right to erasure
Correct Incorrect Correct answer

The right to restrict processing
Correct Incorrect Correct answer

The right to object to processing
Correct Incorrect Correct answer

Correct

Incorrect
Question 8 of 15

8. Question

Of the following data items, which is considered special category data under data protection law?

A bank account number;
Correct Incorrect Correct answer

NHS number;
Correct Incorrect Correct answer

An individual’s age;
Correct Incorrect Correct answer

Step count from a fitness watch.
Correct Incorrect Correct answer

Correct

Incorrect
Question 9 of 15

9. Question

Which of the following reflects a key principle of effective records management and disposal?

Retain all records indefinitely to avoid accidental loss.
Correct Incorrect Correct answer

Allow unrestricted access to all records for convenience.
Correct Incorrect Correct answer

Regularly review and securely dispose of records that are no longer needed.
Correct Incorrect Correct answer

Store all records only in paper format to ensure authenticity.
Correct Incorrect Correct answer

Correct

Incorrect
Question 10 of 15

10. Question

Which of the following statements best describe privacy by design? 

An agreement to publicly publish all data protection impact assessments.
Correct Incorrect Correct answer

An approach that integrates privacy and data protection considerations into the development of systems, services, and processes. 
Correct Incorrect Correct answer

A policy that allows data subjects to design their own privacy settings independently of the organisation's systems. 
Correct Incorrect Correct answer

A strategy focused solely on responding to data breaches after they occur, rather than preventing them in advance. 
Correct Incorrect Correct answer

Correct

Incorrect
Question 11 of 15

11. Question

Which of the following is a valid legal basis for processing personal data under the Article 6 of the UK GDPR? 

You can process personal data when the data subject is not aware of the processing. 
Correct Incorrect Correct answer

You can process personal data whenever your manager decides. 
Correct Incorrect Correct answer

You can process personal data because you have received it from another organisation.
Correct Incorrect Correct answer

You can process personal data with the consent of the data subject. 
Correct Incorrect Correct answer

Correct

Incorrect
Question 12 of 15

12. Question

True or false: AI tools are not subject to the UK GDPR, they are governed by their own set of data protection rules.

True
Correct Incorrect Correct answer

False
Correct Incorrect Correct answer

Correct

Incorrect
Question 13 of 15

13. Question

What of the following is not a way that ICHP can comply with the accountability and governance principle of AI use?

Informing individuals of the use of their personal data.
Correct Incorrect Correct answer

Reviewing outsourced AI systems only after deployment rather than conducting prior due diligence.
Correct Incorrect Correct answer

Ensuring there is a lawful basis for AI use.
Correct Incorrect Correct answer

Conducting a Data Protection Impact Assessment (DPIA).
Correct Incorrect Correct answer

Correct

Incorrect
Question 14 of 15

14. Question

Please list any artificial intelligence tools that you currently use, or would like to use in your day-to-day work at ICHP?

This response will be reviewed and graded after submission.

Grading can be reviewed and adjusted.

Grading can be reviewed and adjusted.
Question 15 of 15

15. Question

Could you please state whether or not you have read the ICHP AI Policy?

This response will be reviewed and graded after submission.

Grading can be reviewed and adjusted.

Grading can be reviewed and adjusted.

Quiz Summary

Information

Results

Results

Categories

1. Question

2. Question

3. Question

4. Question

5. Question

6. Question

7. Question

8. Question

9. Question

10. Question

11. Question

12. Question

13. Question

14. Question

15. Question

Send Us A Message