BCS PDP9 Exam - Topic 10 Question 26 Discussion

Actual exam question for BCS's PDP9 exam

Question #: 26
Topic #: 10

[All PDP9 Questions]

Which of the following statements are CORRECT about records of processing'?

A, It must contain contact details for the Data Protection Officer where applicable.

B, It must be submitted to the Information Commissioner's Office following every Data Protection Impact Assessment

C, It is mandatory for all data processors

D, The controller or the processor a must makes the record available to the supervisory authority on request

E, It must contain contact details for the supervisory authority

AB, C. and D

BA, C, and E

CA. C, D, and E

DA, C, and D

Show Suggested Answer

Suggested Answer: C

Data protection rights were first introduced into UK law by the Data Protection Act 1984, which was enacted to implement the Council of Europe Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data of 1981. The Data Protection Act 1984 established a set of principles for the processing of personal data by data users, such as obtaining consent, ensuring accuracy, and limiting retention. It also created a system of registration for data users and a Data Protection Registrar (later renamed as the Information Commissioner) to oversee and enforce the law. The Data Protection Act 1984 was replaced by the Data Protection Act 1998, which transposed the EU Data Protection Directive 1995 into UK law and extended the scope of data protection to cover manual as well as automated processing of personal data. The Data Protection Act 1998 was further amended by the Data Protection Act 2018, which incorporated the EU General Data Protection Regulation (GDPR) and the Law Enforcement Directive into UK law and made provisions for specific processing situations, such as national security, immigration, and journalism.Reference:

Data Protection Act 19844

Council of Europe Convention 1085

Data Protection Act 19986

Data Protection Act 20187

by Virgie at Oct 22, 2024, 11:17 PM

Limited Time Offer

25%

Off

Get Premium PDP9 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Hershel

5 months ago

Totally agree with A and D, those are essential!

upvoted 0 times

...

Francene

5 months ago

Surprised E is even an option, why would we need that info?

upvoted 0 times

...

Ailene

5 months ago

C is mandatory for all data processors, no doubt about it!

upvoted 0 times

...

Rusty

6 months ago

I think B is a bit misleading, not every assessment needs to be submitted.

upvoted 0 times

...

Felix

6 months ago

A is correct, definitely needs D too.

upvoted 0 times

...

Ashton

6 months ago

I'm a bit confused about whether the contact details for the supervisory authority are required in the records. I thought it was just the DPO's details.

upvoted 0 times

...

Skye

6 months ago

I practiced a similar question, and I believe the controller or processor must make the records available to the supervisory authority on request.

upvoted 0 times

...

Hershel

6 months ago

I think it's mandatory for all data processors to maintain these records, but I can't recall if they need to submit them after every DPIA.

upvoted 0 times

...

Sheridan

7 months ago

I remember that the records of processing must include the contact details for the Data Protection Officer, but I'm not sure about the supervisory authority's details.

upvoted 0 times

...

Dortha

7 months ago

This is a good opportunity to demonstrate my knowledge of data protection regulations. I'll make sure to double-check my answers before submitting.

upvoted 0 times

...

Marylou

7 months ago

I think the best approach here is to carefully read each statement and evaluate whether it is correct or not based on my understanding of the requirements for records of processing.

upvoted 0 times

...

Nina

7 months ago

I'm a bit confused about the difference between a data controller and a data processor. I'll need to review that to make sure I answer this properly.

upvoted 0 times

...

Dominga

7 months ago

Okay, let me think this through. The key points seem to be about the requirements for records of processing, like what information they must contain.

upvoted 0 times

...

Carmen

7 months ago

This question seems straightforward, but I want to make sure I understand the details correctly before answering.

upvoted 0 times

...

Minna

12 months ago

Haha, these data protection questions are a riot. I'm just going to go with whatever option has the most letters. That's the way to ace these exams, right?

upvoted 0 times

Glen

10 months ago

Let's go with option C then, it has the most letters after all.

upvoted 0 times

...

Lajuana

10 months ago

I'm not sure, but I think option D also has a lot of letters. Maybe that's the correct one.

upvoted 0 times

...

Jean

11 months ago

I think option C has the most letters, so that's probably the right answer.

upvoted 0 times

...

Ciara

12 months ago

For real? This is a trick question. The answer is obviously C. A, C, D, and E. Who doesn't know that the record of processing needs to have the supervisory authority's contact details?

upvoted 0 times

Thaddeus

11 months ago

Actually, it's A, C, D, and E. The record must have the supervisory authority's contact details.

upvoted 0 times

...

Kanisha

11 months ago

No, I believe it's A, C, and E.

upvoted 0 times

...

Celestina

11 months ago

I think the correct statements are A, C, and D.

upvoted 0 times

...

Jonelle

1 year ago

Oh man, this one's tricky. I'm going to go with D. A, C, and D. The processor needs to make the record available, right?

upvoted 0 times

Robt

10 months ago

So, the correct answer is D. A, C, and D.

upvoted 0 times

...

Adell

10 months ago

I agree. It's a key requirement under GDPR.

upvoted 0 times

...

Tonja

10 months ago

That makes sense. It's important for transparency and accountability.

upvoted 0 times

...

Rosalind

11 months ago

I think you're right. The processor must make the record available on request.

upvoted 0 times

...

Marge

1 year ago

Hmm, I'm not sure about B. Doesn't the record of processing need to be made available to the supervisory authority on request? I'd go with C. A, C, D, and E.

upvoted 0 times

Shenika

11 months ago

User 2

upvoted 0 times

...

Lajuana

12 months ago

User 1

upvoted 0 times

...

Oliva

1 year ago

I think the correct answer is B. A, C, and E seem the most comprehensive in covering the requirements for records of processing.

upvoted 0 times

Sylvia

11 months ago

I think you're right, B seems to be the most comprehensive choice.

upvoted 0 times

...

Deane

11 months ago

I'm not sure, let's review the options again.

upvoted 0 times

...

Brittni

11 months ago

I agree, A, C, and E cover all the necessary requirements.

upvoted 0 times

...

Cyndy

11 months ago

I think the correct answer is B.

upvoted 0 times

...

Mila

1 year ago

I'm not sure about statement D. Do you think it's necessary to make the record available to the supervisory authority on request?

upvoted 0 times

...

Adela

1 year ago

I agree with you, Cristen. Those statements make sense because they cover the contact details, mandatory requirement, and availability to the supervisory authority.

upvoted 0 times

...

Cristen

1 year ago

I think the correct statements about records of processing are A, C, and D.

upvoted 0 times

...