Exin Exam PDPF Topic 2 Question 61 Discussion

Actual exam question for Exin's PDPF exam

Question #: 61
Topic #: 2

[All PDPF Questions]

To comply with the General Data Protection Regulation (GDPR) it is necessary to create a procedure for reporting data breaches to the Supervisory Authority.

As the controller is a public administration agency, which option is a requirement for this procedure?

AIt must contain a step to perform a Data Protection Impact Analysis (DPIA).

BIt must include an audit step.

CIt should include a step to consult the Data Protection Officer (DPO) in order to determine whether notification to the Supervisory Authority is necessary.

DIt must contain a step to notify the data subject.

Show Suggested Answer

Suggested Answer: D

Data protection and privacy are complementary, but not the same thing.

A very repeated phrase is: ''It is possible to have security without privacy, but it is not possible to have privacy without security''.

Privacy is a right that must be protected, and Data Protection are the measures that will be used to achieve this protection.

by Mabel at May 21, 2024, 01:45 AM

Limited Time Offer

25%

17 days ago

I think option C is the correct answer. The GDPR requires that the controller consult the DPO to determine if notification to the Supervisory Authority is necessary. This is a key step in the breach reporting procedure.

upvoted 0 times

Vallie

24 hours ago

I agree, consulting the Data Protection Officer is crucial in determining if notification to the Supervisory Authority is necessary.

upvoted 0 times

...

Ma

18 days ago

I agree with Dick, option C makes sense to ensure compliance with GDPR regulations.

upvoted 0 times

...

Dick

22 days ago

I think option C is a requirement because the DPO needs to be consulted before notifying the Supervisory Authority.

upvoted 0 times

...