Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Exin Exam PDPF Topic 1 Question 40 Discussion

Actual exam question for Exin's PDPF exam
Question #: 40
Topic #: 1
[All PDPF Questions]

A written contract between a controller and a processor is called a data processing agreement. According to

the GDPR, what does not have to be covered in the written contract?

Show Suggested Answer Hide Answer
Suggested Answer: D

Data protection and privacy are complementary, but not the same thing.

A very repeated phrase is: ''It is possible to have security without privacy, but it is not possible to have privacy without security''.

Privacy is a right that must be protected, and Data Protection are the measures that will be used to achieve this protection.


Contribute your Thoughts:

German
3 months ago
Wait, we don't need to include the technical and organizational measures? That's like the whole point of having this agreement in the first place! *scratches head*
upvoted 0 times
Keshia
1 months ago
Felix: Agreed, it's definitely something that should be included.
upvoted 0 times
...
Yuriko
1 months ago
User 3: But still, it's such an important aspect of data protection.
upvoted 0 times
...
Felix
2 months ago
User 2: Maybe they assume it's already covered in other parts of the agreement.
upvoted 0 times
...
Erick
2 months ago
User 1: I know, right? It seems strange that they wouldn't include that.
upvoted 0 times
...
Desire
2 months ago
Amber: That could be possible, but it still seems odd to leave it out.
upvoted 0 times
...
Roselle
2 months ago
User 3: Maybe there are other regulations that cover those aspects?
upvoted 0 times
...
Amber
2 months ago
User 2: I agree, that seems like a crucial part of the agreement.
upvoted 0 times
...
Annelle
3 months ago
User 1: Yeah, it's strange that technical and organizational measures are not required.
upvoted 0 times
...
...
Jacquline
4 months ago
The information security and breach procedures are crucial - that's like the bread and butter of the data processing agreement!
upvoted 0 times
Alfred
2 months ago
B) Which data are covered by the data processing agreement
upvoted 0 times
...
Jesusita
3 months ago
A) The contractor code of business ethics and conduct that is used.
upvoted 0 times
...
...
Keith
4 months ago
I agree, the data covered should be clearly specified in the contract. Can't leave any room for ambiguity there.
upvoted 0 times
...
Harris
4 months ago
I'm not sure, but I think it makes sense that the contractor code of ethics is not specifically required in the data processing agreement.
upvoted 0 times
...
Phyliss
4 months ago
I agree with Melina, because the GDPR focuses more on data protection measures.
upvoted 0 times
...
Yuki
4 months ago
The contractor code of business ethics and conduct is definitely important to include in the data processing agreement. That's a key part of ensuring compliance.
upvoted 0 times
Kirk
2 months ago
D) The technical and organizational measures implemented
upvoted 0 times
...
Jesus
2 months ago
C) The information security and personal data breach procedures
upvoted 0 times
...
Sherrell
3 months ago
B) Which data are covered by the data processing agreement
upvoted 0 times
...
Dorinda
3 months ago
A) The contractor code of business ethics and conduct that is used.
upvoted 0 times
...
...
Melina
4 months ago
I think the answer is A) The contractor code of business ethics and conduct that is used.
upvoted 0 times
...

Save Cancel