Practice Test: real-life DA GDPR Problems

You meet Thomas Paine, one of your chapter members, at an event. He tells you he’s moving to a research station in Antarctica and will be there for 2 years. In your role as a database admin, what should you do?

a) Ask him if you may update his DA information to reflect his upcoming move right there at the event.

b) Tell your chapter chair to delete him.

c) Don’t ask him anything, just go home and update his data when you have time.

You notice on Facebook that Michelle Yeoh, one of your long-term members, has changed her location from Hong Kong to Cancun. What can you do?
a) Change her address in the database to Cancun.
b) Write to Michelle from her record in the database and ask if she wants to update her location in the DA records.
c) Double check on Linked in – if it matches, delete her.
d) Call her and ask if she would like to update her member record.
You have accumulated a stack of paper member applications from local events. They have all been added to the database by your team. What do you do with them?
a) Keep them in a folder for future reference
b) Throw them in the rubbish
c) Shred them
You have been adding notes and corrections to your membership list in Excel, but not to the database. You realize your list is 29 days old. What can you do to save the information?
a) You know you didn’t delete anyone, so keep working on the list.
b) Ask for a new list ASAP. Run a comparison to find any deletions. Remove anyone from your old list who is not on the new list. Enter the changes into the database as soon as you can.
c) This doesn’t apply to me, we are not in a GDPR Country.
You asked for a member list export, and you can see on this list that 12 people vote in Arizona. You want to inform them about the ERA vote. What do you do?
a) Create a filter in NB for these voters and email them using the Broadcaster.
b) Copy their email addresses into the BCC field in your email program and send them a note from your personal email account.
You get a message on Facebook Messenger from Idris Elba, who says he and Ricky Martin want to attend your chapter meeting, but it is at a member’s private home and he doesn’t see the option to RSVP on Facebook. What do you do?
a) Email the Helpdesk and ask if you can send him the address.
b) Reply with the link to the event on the DA Website and ask him to RSVP there.
c) Offer to pick them up and drive them there.
d) Add them both to the database immediately.
Jimmy Smits is the Volunteer Coordinator for Denmark. He has no signed Confidentiality Agreement and has none of the certifications to access the database. How can he reach out to volunteers?
a) The Denmark chair, Martina Navratilova, gives him a list of members who have said they want to volunteer so that Jimmy can email them all from his personal email account.
b) Jimmy signs a CA and gives it to Martina so he can get a copy of the Membership List and call all the volunteers who are callable.
c) Martina emails all of the Danish membership, asking them to fill out a Google Form if they wish to volunteer. On the form she specifies that Jimmy will be in touch with everyone who signs up by emailing them from his personal email address.
d) Martina emails all the volunteers using the Broadcaster and tells them that Jimmy will be in touch from his personal account.
e) Martina emails all the volunteers from the Broadcaster and asks them to reply to her if they are still interested. She then passes this list on to Jimmy.
f) A and B
g) B and C
Key points in this problem:
► Unsolicited emails must be sent from Nationbuilder.
► Volunteers must Opt-in to being contacted outside of the database.
► Nobody should have access to Membership information unless they have signed and filed a Confidentiality Agreement.
Your friend, Paris member Madeline Albright, is moving from Paris to Sydney. You tell the Chair of France, Mehmet Oz, when you see him at the Global Meeting in Toronto. Mehmet and Maddie have met, but only socialize with each other at DA Events. What can Mehmet do?
a) Mehmet can email Maddie from his personal email account, cardio@gmail.com, and ask her for her new address information.
b) Mehmet can email Maddie from his chair@democratsabroad.fr.
c) Mehmet can update Maddie’s address information based on information he gets from you.
d) Mehmet can email Maddie from her record in NationBuilder and ask her why she moved without telling him
e) Mehmet can email Maddie from her record in Nationbuilder and ask her if there’s any updated address information that she would like DA to have.
Key points in this problem:
► Unsolicited emails must be sent from Nationbuilder.
► All personal information must come directly from the member.
► Respect members’ privacy and use neutral language when you write to them.
Viola Davis has a number of non-members who want to attend meetings and receive the newsletter for her local chapter. They aren’t American, so they can’t be members. How can she keep them informed?
a) This is irrelevant to GDPR
b) She can copy all the member email addresses to her personal computer and email the newsletter from her laptop with everyone in BCC.
c) She can forward the monthly newsletter from her inbox to all the non members.
d) She can forward the monthly newsletter to all the non-members after removing the DA footer from the email.
e) She can post the monthly newsletter as a news item on the DA Website.
Key point in this problem:

►Unsolicited emails must be sent from Nationbuilder.

Stanley Kwan has posted a Poetry Jam event for Wednesday. He needs to email all the RSVPers with the updated address for the event, but he is not an email Admin. What can he do?
a) Email everyone who RSVP'd from his personal email address.
b) Ask the Helpdesk to send the new address to all the attendees.
c) Post the updated address of the jam in the event so that it appears on the map.
d) Ask the Helpdesk for an RSVP List and email everyone from his personal address.
e) Ask the Helpdesk for an RSVP List and call everyone who responded.
f) Ask his chapter chair, Monserrat Caballé, to email all the members who RSVP'd from NationBuilder and email all the non-members from her personal email address.
Key points in this problem:
► Unsolicited emails to members must be sent from NationBuilder.
► Non-Members are not emailable from NationBuilder.
You want to highlight the geographic spread of your caucus members and have one member per US region (Northeast, Southeast, Midwest, Southwest, and West) write a story about the reason they are Democrats. How can you do this?
a) Pick 5 individuals based on their voting state. Put them on a list in the database, and send them an email blast to ask them to tell their stories.
b) Send an email blast to your entire membership and ask for volunteers to tell their stories.
c) Pick 5 states and email all the members who vote in those states to ask them to tell their stories.
d) Pick 5 individuals that you have met in person and email them from their records to ask them to tell their stories.
Key points in this problem:
►Our members' data is personal and private. They didn’t register with DA so that they could tell their private stories in public. Our primary purpose is to help Democrats Abroad vote.
You’re calling chapter members from a handwritten list that you have been compiling over the past months based on attendance at monthly meetings in order to verify their member information and update their Last Verified Date (LVD). You’re writing down all the new information as you go and will update it in NationBuilder next week. Is this what you should be doing and is it compliant with GDPR?
a) Yes, it is fine because it’s a list that you put together yourself, not from the database.
b) Yes, because this is what you should be doing to verify your members.
c) No, because part of the list is more than 30 days old.
d) Yes, because all the members signed the attendance sheet.
Key points in this problem:
►Any member list outside of the database that is older than 30 days must be disposed of.