# Personal data at the office: test your reflexes

URL : https://skillrung.com/en/quiz/data-compliance/personal-data-at-the-office
Topic: Compliance & personal data · Updated on 2026-09-11

## In brief

Protecting personal data at the office comes down to three questions asked before acting: what is this file for, how long do we keep it, who can access it. They are enough to frame a group email, a team photo or a customer file passed to a colleague. This free ten-question quiz tests those reflexes on ordinary office actions.

Ten questions on personal data as you actually meet it: an email to forty contacts, a photo published on the website, a camera installed in a room, a file requested by a colleague, a message sent to the wrong recipient.

## The questions

### 1. You send the same information to forty external contacts. Which address field protects their email addresses?

- The blind carbon copy field, also called Bcc
- The carbon copy field, also called Cc
- The main recipient field, also called To
- The message's automatic reply field

### 2. A photo of a colleague taken at an internal event can be published on the public website without their agreement.

### 3. What determines how long a file of personal data may be kept?

- The purpose for which the data was collected
- The storage capacity available on the server
- The lifespan of the software hosting it
- How often the file is consulted

### 4. Which conditions govern video surveillance installed in a workplace? Several answers are expected.

- Clear information for the people being filmed
- Framing that avoids permanent surveillance of a workstation
- A defined retention period for the footage
- Access to the footage open to all staff
- A discreet installation to remain effective

### 5. You outsource your email campaigns to a provider that hosts your contact file. What does that choice entail?

- A written contract framing what the provider may do
- A complete transfer of responsibility to the provider
- A prior declaration to the supervisory authority
- Individual notice to every contact in the file

### 6. A person can ask their employer to see the data held about them.

### 7. A customer contact file has been sent by mistake to an external recipient. Which reflex comes first?

- Report the incident to your organisation's data protection lead
- Recall the message before it is read
- Wait for the recipient's reaction
- Fix the mailing list to avoid a repeat

### 8. Which information appears in the notice given to people at the time of collection? Several answers are expected.

- The purpose of the collection
- The planned retention period
- The rights the person has
- The name of the IT provider
- The cost of the processing for the organisation

### 9. A customer asks for their data to be erased while their invoice must still be kept. Which answer is correct?

- Erasure gives way to a legal obligation to retain
- Erasure applies immediately to all the data held
- Erasure requires the accountant's prior agreement
- Erasure extinguishes any debt still owed

### 10. What makes a piece of information personal data?

- It allows a person to be identified, directly or indirectly
- It appears in a file declared to the authority
- It was collected through an online form
- It concerns private life outside work

Correct answers and explanations are not published: they are given once you have answered, on the quiz page.