Exin Exam PDPF Topic 1 Question 67 Discussion

Actual exam question for Exin's PDPF exam

Question #: 67
Topic #: 1

[All PDPF Questions]

According to the GDPR, for which situations should a Data Protection Impact Assessment (DPIA) be conducted?

AFor all projects that include technologies or processes that require data protection

BFor all sets of similar processing operations with comparable risks

CFor any situation where technologies and processes will be subject to a risk assessment

DFor technologies and processes that are likely to result in a high risk to the rights of data subjects

Show Suggested Answer

Suggested Answer: B

by Dana at Aug 06, 2024, 03:15 PM

Limited Time Offer

25%

Off

Get Premium PDPF Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Linwood

17 days ago

You know, the only 'high risk' here is failing this exam. Better not mess this one up!

upvoted 0 times

...

Cordie

27 days ago

I'm going with D. Keeping data subjects' rights protected is the whole point of a DPIA, after all.

upvoted 0 times

Lawanda

1 days ago

User1: I agree, D is the correct choice for conducting a DPIA.

upvoted 0 times

...

Yaeko

1 months ago

Haha, imagine if we had to do a DPIA for every single project! The company would never get anything done. Glad C is not the right answer.

upvoted 0 times

Tawanna

13 days ago

B) For all sets of similar processing operations with comparable risks

upvoted 0 times

...

Nickolas

19 days ago

A) For all projects that include technologies or processes that require data protection

upvoted 0 times

...

Carmen

2 months ago

I'm not sure why B is even an option. The GDPR doesn't mention anything about 'sets of similar processing operations with comparable risks' as a criteria for a DPIA.

upvoted 0 times

Karima

29 days ago

User 2: I agree, the GDPR requires a DPIA for situations likely to result in high risk to data subjects.

upvoted 0 times

...

Odelia

1 months ago

User 1: I think the answer is D, for high-risk technologies and processes.

upvoted 0 times

...

Lenita

2 months ago

Option D seems to be the correct answer. The GDPR specifically requires a DPIA for technologies and processes that are likely to result in a high risk to the rights of data subjects.

upvoted 0 times