Exin Exam PDPF Topic 1 Question 40 Discussion

Actual exam question for Exin's PDPF exam

Question #: 40
Topic #: 1

[All PDPF Questions]

A written contract between a controller and a processor is called a data processing agreement. According to

the GDPR, what does not have to be covered in the written contract?

AThe contractor code of business ethics and conduct that is used.

BWhich data are covered by the data processing agreement

CThe information security and personal data breach procedures

DThe technical and organizational measures implemented

Show Suggested Answer

Suggested Answer: D

Data protection and privacy are complementary, but not the same thing.

A very repeated phrase is: ''It is possible to have security without privacy, but it is not possible to have privacy without security''.

Privacy is a right that must be protected, and Data Protection are the measures that will be used to achieve this protection.

by Xuan at Mar 22, 2023, 01:43 AM

Limited Time Offer

25%

Off

Get Premium PDPF Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

German

1 months ago

Wait, we don't need to include the technical and organizational measures? That's like the whole point of having this agreement in the first place! *scratches head*

upvoted 0 times

Roselle

3 days ago

User 3: Maybe there are other regulations that cover those aspects?

upvoted 0 times

...

Amber

14 days ago

User 2: I agree, that seems like a crucial part of the agreement.

upvoted 0 times

...

Annelle

23 days ago

User 1: Yeah, it's strange that technical and organizational measures are not required.

upvoted 0 times

...

Jacquline

2 months ago

The information security and breach procedures are crucial - that's like the bread and butter of the data processing agreement!

upvoted 0 times

Alfred

14 days ago

B) Which data are covered by the data processing agreement

upvoted 0 times

...

Jesusita

16 days ago

A) The contractor code of business ethics and conduct that is used.

upvoted 0 times

...

Keith

2 months ago

I agree, the data covered should be clearly specified in the contract. Can't leave any room for ambiguity there.

upvoted 0 times

...

Harris

2 months ago

I'm not sure, but I think it makes sense that the contractor code of ethics is not specifically required in the data processing agreement.

upvoted 0 times

...

Phyliss

2 months ago

I agree with Melina, because the GDPR focuses more on data protection measures.

upvoted 0 times

...

Yuki

2 months ago

The contractor code of business ethics and conduct is definitely important to include in the data processing agreement. That's a key part of ensuring compliance.

upvoted 0 times