BCS PDP9 Exam - Topic 6 Question 24 Discussion

Actual exam question for BCS's PDP9 exam

Question #: 24
Topic #: 6

[All PDP9 Questions]

What factors should be considered when looking at security of processing under Article 32 of the GDPR?

Select the INCORRECT answer

ALawfulness of processing

BThe most secure option available

CThe likelihood of a risk to the rights of the data subjects

DAdherence to an approved code of conduct

Show Suggested Answer

Suggested Answer: C

Data protection rights were first introduced into UK law by the Data Protection Act 1984, which was enacted to implement the Council of Europe Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data of 1981. The Data Protection Act 1984 established a set of principles for the processing of personal data by data users, such as obtaining consent, ensuring accuracy, and limiting retention. It also created a system of registration for data users and a Data Protection Registrar (later renamed as the Information Commissioner) to oversee and enforce the law. The Data Protection Act 1984 was replaced by the Data Protection Act 1998, which transposed the EU Data Protection Directive 1995 into UK law and extended the scope of data protection to cover manual as well as automated processing of personal data. The Data Protection Act 1998 was further amended by the Data Protection Act 2018, which incorporated the EU General Data Protection Regulation (GDPR) and the Law Enforcement Directive into UK law and made provisions for specific processing situations, such as national security, immigration, and journalism.Reference:

Data Protection Act 19844

Council of Europe Convention 1085

Data Protection Act 19986

Data Protection Act 20187

by Florinda at Sep 17, 2024, 12:57 AM

Limited Time Offer

25%

Off

Get Premium PDP9 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Elliott

3 months ago

The likelihood of risk is super important, can't overlook that!

upvoted 0 times

...

Gladys

4 months ago

Wait, is adherence to a code of conduct really a factor? Sounds weird.

upvoted 0 times

...

Shalon

4 months ago

Totally agree, B seems off.

upvoted 0 times

...

Ettie

4 months ago

I think "the most secure option available" isn't really a requirement.

upvoted 0 times

...

Gary

4 months ago

Lawfulness of processing is definitely a factor.

upvoted 0 times

...

Diane

4 months ago

"Adherence to an approved code of conduct" seems like it could be relevant, but I’m not entirely sure how it fits into security specifically.

upvoted 0 times

...

Chan

5 months ago

I recall that assessing risks to data subjects is crucial, so I think "likelihood of a risk" is definitely a factor we should consider.

upvoted 0 times

...

Stephaine

5 months ago

I practiced a similar question where we had to identify irrelevant factors, and I feel like "the most secure option available" might not be the right answer here.

upvoted 0 times

...

Gertude

5 months ago

I think I remember that Article 32 focuses on security measures, but I'm not sure if "lawfulness of processing" is really a factor to consider.

upvoted 0 times

...

Reiko

5 months ago

Okay, let's see. I know Article 32 covers things like the state of the art, the costs of implementation, and the nature, scope, context, and purposes of the processing. I'll need to double-check that "lawfulness of processing" is not one of the factors mentioned.

upvoted 0 times

...

Jestine

5 months ago

Hmm, I'm a bit unsure about this one. I need to re-read Article 32 carefully to make sure I understand the key factors to consider for security of processing.

upvoted 0 times

...

Jose

5 months ago

This question seems pretty straightforward. I'll focus on identifying the factors that are not mentioned in Article 32 of the GDPR.

upvoted 0 times

...

Loreta

5 months ago

I've got this! The key is to identify the factor that is not listed in Article 32. I'm pretty confident I can eliminate the incorrect answer here.

upvoted 0 times

...

Stanford

5 months ago

I remember we practiced a similar question in class, and I think data retention is also important, but blockchain might not be the best fit for that.

upvoted 0 times

...

Chauncey

10 months ago

Is there a 'none of the above' option? This GDPR stuff is giving me a headache.

upvoted 0 times

Kayleigh

9 months ago

Merri: Thanks for clarifying, this GDPR stuff is confusing.

upvoted 0 times

...

Merri

9 months ago

User 2: The correct answer is B) The most secure option available.

upvoted 0 times

...

Dorothy

10 months ago

User 1: No, there is no 'none of the above' option.

upvoted 0 times

...

Truman

10 months ago

Adherence to an approved code of conduct? Sounds like a trap. I'm going with that one.

upvoted 0 times

...

Shelton

11 months ago

The likelihood of a risk to the data subjects? That's like a no-brainer. Gotta keep those subjects safe!

upvoted 0 times

Judy

9 months ago

C) The likelihood of a risk to the rights of the data subjects

upvoted 0 times

...

Chantay

9 months ago

Wait, that's incorrect. It's not just about being the most secure, right?

upvoted 0 times

...

Diane

9 months ago

B) The most secure option available

upvoted 0 times

...

Camellia

9 months ago

Yeah, we definitely need to prioritize the safety of the data subjects.

upvoted 0 times

...

Jamie

9 months ago

D) Adherence to an approved code of conduct

upvoted 0 times

...

Evelynn

10 months ago

C) The likelihood of a risk to the rights of the data subjects

upvoted 0 times

...

Catalina

10 months ago

B) The most secure option available

upvoted 0 times

...

Leslee

10 months ago

A) Lawfulness of processing

upvoted 0 times

...

Terina

11 months ago

I'm pretty sure the most secure option available is the correct one. GDPR loves security, right?

upvoted 0 times

...

Jeanice

11 months ago

Wait, we're supposed to select the INCORRECT answer? This is backwards!

upvoted 0 times

Vicente

10 months ago

User 2

upvoted 0 times

...

Jonelle

10 months ago

User 1

upvoted 0 times

...

Mozelle

11 months ago

I agree with Annabelle. Adherence to an approved code of conduct is also important when looking at security of processing under Article 32 of the GDPR.

upvoted 0 times

...

Annabelle

11 months ago

Actually, the incorrect answer is B) The most secure option available. We need to consider the likelihood of a risk to the rights of the data subjects.

upvoted 0 times

...

Edelmira

11 months ago

I think we should consider the most secure option available.

upvoted 0 times

...