Final test & certificate

Pick the best answer for each question. 8/10 to earn the certificate.

To pass: at least 8 of 10 correct.

1. Question 1. When did Personal Data Protection Law No. 91/2025/QH15 take effect?

   A1 January 2026B1 July 2025C1 July 2023

2. Question 2. Which instrument does Decree 356/2025/ND-CP replace?

   ADecree 13/2023/ND-CP on personal data protectionBThe Labour Code 2019CThe Cybersecurity Law 2018

3. Question 3. Which of the following is SENSITIVE personal data?

   AFingerprint data used for time attendanceBA contact phone numberCEducation level

4. Question 4. Which of these is NOT a condition of valid consent?

   AIt is written into the employment contractBIt is freely givenCIt is specific to each purpose

5. Question 5. Why is consent a WEAK basis in an employment relationship?

   AThe power imbalance makes it very hard for an employee to refuseBEmployees rarely read documents carefullyCThe law forbids relying on employee consent

6. Question 6. The company wants to keep rejected candidates' CVs for future rounds. What is required?

   ASeparate consent for that new purposeBNothing, since the candidate sent the CV voluntarilyCA note in the interview minutes

7. Question 7. On what basis does the company pay wages and social insurance?

   APerformance of the employment contract and statutory dutyBThe employee's consentCThe employer's legitimate interest

8. Question 8. On discovering a personal data protection violation, within what period must the competent authority be notified?

   A72 hours from discoveryB30 days from discoveryCThe same working day

9. Question 9. What is the cheapest way for HR to reduce data risk?

   ACollect fewer data fieldsBBuy better security softwareCHave every employee sign a confidentiality undertaking

10. Question 10. What should happen to the biometric data of an employee who has left?

    ADelete it immediately — there is no operational reason to keep itBKeep it in case they returnCKeep it under the general employee file retention period