Exin Exam PDPF Topic 3 Question 65 Discussion

Actual exam question for Exin's PDPF exam

Question #: 65
Topic #: 3

[All PDPF Questions]

Which data subject right is explicitly defined by the GDPR?

AA copy of personal data must be provided in the format requested by the data subject.

BPersonal data must always be erased if the data subject requests this.

CAccess to personal data must be provided free of charge for the data subject.

DPersonal data must always be changed at the request of the data subject.

Show Suggested Answer

Suggested Answer: C

Controller: Correct. The controller determines the purpose and means of the processing. (Literature: A, Chapter 1; GDPR Article 4(7))

Processor: Incorrect. The controller determines the purpose of the processing, the processor works on the controller's instructions.

Supervisory authority: Incorrect. The supervisory authority monitors and enforces compliance with the GDPR requirements.

Third party: Incorrect. A third party has no role in determining the purpose of the processing. Any party that determines the purpose would become a new controller.

by Michal at Jul 06, 2024, 07:02 AM

Limited Time Offer

25%

17 days ago

I think the answer is A) A copy of personal data must be provided in the format requested by the data subject.

upvoted 0 times

...