Exin Exam PDPF Topic 1 Question 40 Discussion

Actual exam question for Exin's PDPF exam

Question #: 40
Topic #: 1

[All PDPF Questions]

A written contract between a controller and a processor is called a data processing agreement. According to

the GDPR, what does not have to be covered in the written contract?

AThe contractor code of business ethics and conduct that is used.

BWhich data are covered by the data processing agreement

CThe information security and personal data breach procedures

DThe technical and organizational measures implemented

Show Suggested Answer

Suggested Answer: D

Data protection and privacy are complementary, but not the same thing.

A very repeated phrase is: ''It is possible to have security without privacy, but it is not possible to have privacy without security''.

Privacy is a right that must be protected, and Data Protection are the measures that will be used to achieve this protection.

by Xuan at Mar 22, 2023, 01:43 AM

Limited Time Offer

25%

Off

Get Premium PDPF Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

German

8 days ago

Wait, we don't need to include the technical and organizational measures? That's like the whole point of having this agreement in the first place! *scratches head*

upvoted 0 times

...

Jacquline

11 days ago

The information security and breach procedures are crucial - that's like the bread and butter of the data processing agreement!

upvoted 0 times

...

Keith

12 days ago

I agree, the data covered should be clearly specified in the contract. Can't leave any room for ambiguity there.

upvoted 0 times

...

Harris

16 days ago

I'm not sure, but I think it makes sense that the contractor code of ethics is not specifically required in the data processing agreement.

upvoted 0 times

...

Phyliss

20 days ago

I agree with Melina, because the GDPR focuses more on data protection measures.

upvoted 0 times

...

Yuki

20 days ago

The contractor code of business ethics and conduct is definitely important to include in the data processing agreement. That's a key part of ensuring compliance.

upvoted 0 times

...

Melina

24 days ago

I think the answer is A) The contractor code of business ethics and conduct that is used.

upvoted 0 times

...