Exin Exam PDPF Topic 5 Question 46 Discussion

Actual exam question for Exin's PDPF exam

Question #: 46
Topic #: 5

[All PDPF Questions]

A controller discovers that a data subject, who had given consent for the processing of his data, has passed away. What this implies for data processing according to the General Data Protection Regulation (GDPR)?

AWith the death of the data owner, the controller can continue processing the data, as they are no longer under the GDPR.

BThe data can only be processed by the controller respecting the consent provided by the holder.

CThe controller must delete the data of the holder, since with the death of the holder the consent is automatically revoked.

DThe controller can process the data of a deceased person as long as it anonymizes the data.

Show Suggested Answer

Suggested Answer: D

Data protection and privacy are complementary, but not the same thing.

A very repeated phrase is: ''It is possible to have security without privacy, but it is not possible to have privacy without security''.

Privacy is a right that must be protected, and Data Protection are the measures that will be used to achieve this protection.

by Cordelia at Aug 06, 2023, 05:03 PM

Limited Time Offer

25%

Off

Get Premium PDPF Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Dominic

2 days ago

Anonymizing the data? Yeah, right, like that's going to work. The controller's gonna have to dig up the dead guy's data and get rid of it. End of story.

upvoted 0 times

...

Fabiola

14 days ago

I think the correct answer is C - the consent is revoked when the person dies, so the controller has to delete the data. Anything else would be a violation of privacy, am I right?

upvoted 0 times

...