EXIN PDPP case studies
EXIN PDPP · Put your knowledge to work in context.
The EXIN Privacy and Data Protection Professional (PDPP) is an EXIN certification in the Data Protection & Security category of EXIN's certification portfolio. EXIN describes itself as an independent examining body offering certifications across AI, security, privacy and service management, and states that it has 40 years of experience and 450+ partners. The EXIN PDPP case studies are 5 cases and about 4,294 words.
1Screen-sharing from Hyderabad: is it a transfer, and who signs what?
Nordwind Care Systems BV (Utrecht) supplies scheduling and rostering software to home-care providers. Its platform holds care plans, client addresses and visit notes, which in practice include data about health and mobility.
832 words, about 4 min2The wellness watch: controller, joint controller, or two controllers?
Meridian Manufacturing NV runs a voluntary wellness programme for its 1,400 Belgian employees. Staff who enrol receive a fitness watch from VitalityTech Ltd (Dublin) and use its app, which records steps, sleep, resting heart rate and location during workouts.
849 words, about 4 min3The 41,000-email request and the promise of confidentiality
On Monday 3 March a UK retailer receives an email from a former sales manager who resigned in January: 'Under GDPR I want a copy of all my personal data, including every email I sent or received on the company account, my manager's handwritten notes, and the audio of my two performance meetings.' The company has 260 staff, one HR system, Microsoft 365 mailboxes and a three-year email retention rule. The former manager's mailbox held about 41,000 messages.
829 words, about 4 min4Ransomware at a home-care provider: notice, DPO independence and the missing DPIA
Zorgzaam Thuis is a Dutch home-care organisation with 400 staff and 2,300 clients. On Monday at 08:40 the IT manager finds ransomware on the file server holding care plans, medication schedules and staff rosters.
898 words, about 4 min5The cookie banner with 214 partners and a consent-or-pay wall
Atelier Lumen sells furniture online from Belgium. Its cookie banner reads 'We and our 214 partners use cookies and legitimate interests to personalise ads and measure performance', with a large black 'Accept all' button and a small grey 'Preferences' link.
886 words, about 4 min