Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25

- Free Preparation Discussions

BCS PDP9 Exam - Topic 4 Question 19 Discussion

Actual exam question for BCS's PDP9 exam

Question #: 19
Topic #: 4

[All PDP9 Questions]

A privacy notice MUST NOT contain

AThe contact details of the controller

BThe purpose of the processing

CDetails of the processor's staff

DDetails of the right to lodge a complaint with the supervisory authority

Show Suggested Answer

Suggested Answer: A

If a complainant disagrees with the decision of the UK's supervisory authority, which is the Information Commissioner's Office (ICO), they have the right to appeal to the First Tier Tribunal (Information Rights). The tribunal is an independent body that can review the ICO's decision and either uphold it, vary it or cancel it. The tribunal can also direct the ICO to take certain actions, such as issuing a decision notice or an enforcement notice. The appeal must be lodged within 28 days of receiving the ICO's decision, using the notice of appeal form and providing the relevant documents and grounds for appeal. The tribunal will then notify the ICO and the complainant of the appeal and the procedure for dealing with it. The tribunal may hold a hearing to examine the evidence and arguments of both parties, or decide the case on the basis of written submissions only. The tribunal will issue a written decision, which will be sent to both parties and published on the tribunal's website. The tribunal's decision can be further appealed to the Upper Tribunal on a point of law, with the permission of the First Tier Tribunal or the Upper Tribunal.Reference:

Information rights and data protection: appeal against the Information Commissioner1

Notice of appeal form2

First Tier Tribunal (Information Rights) website3

by Walton at Jul 08, 2024, 12:33 AM

Limited Time Offer

25%

Off

Get Premium PDP9 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Almeta

10 months ago

This seems odd, why wouldn't they include all that info?

upvoted 0 times

...

Alesia

10 months ago

Right to lodge a complaint should always be there!

upvoted 0 times

...

Mitsue

10 months ago

Wait, are you telling me they can't include staff details?

upvoted 0 times

...

Alisha

10 months ago

I agree, the purpose of processing is essential info!

upvoted 0 times

...

Margret

10 months ago

Privacy notices should definitely include contact details.

upvoted 0 times

...

Daniel

11 months ago

I feel like the purpose of processing is always required in these notices, so it can't be option B. Maybe it's C after all?

upvoted 0 times

...

Alline

11 months ago

I practiced a similar question where it asked about what must be included in a privacy notice, but I can't recall if details about lodging a complaint were mandatory or not.

upvoted 0 times

...

Ciara

11 months ago

I'm not entirely sure, but I remember something about not including details of the processor's staff. That seems like it could be the answer.

upvoted 0 times

...

Lauran

11 months ago

I think the privacy notice should definitely include the contact details of the controller, so it can't be that one.

upvoted 0 times

...

Lindy

11 months ago

I'm a little confused on this one. I know the privacy notice has to include a lot of specific information, but I'm not sure what exactly can't be included. I'll have to review my notes and try to remember the requirements.

upvoted 0 times

...

Carrol

11 months ago

Okay, let me think this through step-by-step. The privacy notice has to include the contact details of the controller and the purpose of the processing, so those can't be the answer. And it has to include details about the right to lodge a complaint, so that's not it either. That leaves C as the only option that doesn't have to be included. I think I've got this!

upvoted 0 times

...

Dominque

11 months ago

Hmm, I'm a bit unsure here. I know the privacy notice has to include certain information, but I can't remember if the details of the processor's staff are required or not. I'll have to think this through carefully.

upvoted 0 times

...

Bulah

11 months ago

I'm pretty confident about this one - the privacy notice must contain all the details listed, so the correct answer is C.

upvoted 0 times

...

Cletus

12 months ago

This seems like a pretty straightforward question. The statement says the laws are the same across all states, so I'm going to go with True on this one.

upvoted 0 times

...

Merri

12 months ago

This seems like a tricky question. I'll need to think carefully about the pros and cons of the CEO serving as chairman.

upvoted 0 times

...

Christa

1 year ago

Details of the processor's staff? More like the processor's secret dance moves. I'll have to go with C on this one.

upvoted 0 times

...

Dong

1 year ago

The purpose of processing? That's like asking a rabbit why it hops. B is the way to go.

upvoted 0 times

Hui

1 year ago

Definitely, it's important to know what information should not be included.

upvoted 0 times

...

Tamie

1 year ago

I think B is the best option for what should not be included in a privacy notice.

upvoted 0 times

...

Cristal

1 year ago

Yeah, it's not necessary to include that in a privacy notice.

upvoted 0 times

...

Lindsey

1 year ago

I agree, the purpose of processing is like asking a rabbit why it hops.

upvoted 0 times

...

...

Fatima

1 year ago

Right to lodge a complaint? More like the right to lodge a strongly worded letter. I'll pick D.

upvoted 0 times

...

Alida

1 year ago

A privacy notice without the controller's contact details? That's like a car without a steering wheel. Gotta be A.

upvoted 0 times

Laurena

1 year ago

Definitely A. It's a crucial part of ensuring data protection and privacy.

upvoted 0 times

...

Lou

1 year ago

Definitely A. It's a crucial part of ensuring data protection and privacy.

upvoted 0 times

...

Shalon

1 year ago

Yeah, without the controller's contact details, how can we reach out for questions or concerns?

upvoted 0 times

...

Matthew

1 year ago

Yeah, without the controller's contact details, how can we reach out for questions or concerns?

upvoted 0 times

...

Carin

1 year ago

I think it's A too. The contact details are important for transparency.

upvoted 0 times

...

Paulina

1 year ago

I think it's A too. The contact details are important for transparency.

upvoted 0 times

...

...

Tammara

1 year ago

Details of the processor's staff? That's just an invitation for identity theft! I'll go with C.

upvoted 0 times

Tayna

1 year ago

C) Details of the processor's staff

upvoted 0 times

...

Martina

1 year ago

B) The purpose of the processing

upvoted 0 times

...

Ernestine

1 year ago

A) The contact details of the controller

upvoted 0 times

...

...

Stephania

1 year ago

But including details of the processor's staff would be irrelevant to the privacy notice.

upvoted 0 times

...

Fernanda

1 year ago

I disagree, I believe it's A) The contact details of the controller.

upvoted 0 times

...

Stephania

1 year ago

I think the answer is C) Details of the processor's staff.

upvoted 0 times

...