Discuss Exin PDPF Exam Topic 1 Question 81

Article 33 of the GDPR deals with ''Notification of a personal data breach to the supervisory authority''.

Paragraph 3 sets out the minimum information that must be included in this notification. Which of the below is one of these?

AThe contact of the data protection officer or another point of contact where more information could be obtained.

BContact information for all data subjects.

CA copy of the breached personal data to be analyzed.
Section: (none)
Explanation

Suggested Answer: C

Yes, because the shopkeeper cannot identify the owner of the telephone. Incorrect. The issue is not whether the shopkeeper can identify the visitor, but that it is technically possible to do so.

Yes, because the visitor has automatically consented by connecting to the Wi-Fi. Incorrect. Consent must be an active, informed and free act of agreement to the processing. To see a MAC-address, the visitor does not need to be logged onto the Wi-Fi.

No, because the telephones MAC-address must be regarded as personal data. Correct. The phone's signal is a unique code that can be linked to the owner of the phone. The data must be regarded as personal data, because it is technically possible to identify the visitor. (Literature: A, Chapter 3; GDPR Article 26 and 30)

No, because the telephone providers are the owners of the MAC-addresses. Incorrect. The shopkeeper is not allowed to keep the data or process it because it must be regarded as personal data. The telephone provider is not the owner of the MAC-address, nor is the telephone provider protected by the GDPR.

Get Premium PDPF Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

33 comments · newest first

Dorethea 11 months ago

I thought they had to notify all data subjects too, huh?

Clement 11 months ago

C sounds too extreme, they can't just share personal data like that!

Elenore 11 months ago

Wait, is B really not required? That seems odd.

Marquetta 11 months ago

I agree, A makes the most sense here.

Shelia 12 months ago

A is definitely one of the required details!

Kiera 12 months ago

I remember focusing on the importance of having a contact point for follow-up questions. It makes sense that it would be part of the minimum information required.

Layla 12 months ago

I vaguely recall a practice question mentioning that a copy of the breached data isn't required in the notification. It seems like that would complicate things too much.

Caprice 1 year ago

I'm not entirely sure, but I feel like we discussed that they don't need to provide all data subjects' contact info in the notification.

Davida 1 year ago

I think I remember that the notification should include a contact point, like the DPO's info. That seems to fit with what we studied about transparency.

Carolann 1 year ago

Okay, let me think this through step-by-step. The question is asking about the minimum information required in the notification, and A seems to fit that description best. I'll go with A unless I spot something I'm missing.

Lisandra 1 year ago

The key is to focus on the specific requirements mentioned in paragraph 3 of Article 33. I'm pretty confident A is the correct answer, but I'll double-check just to be sure.

Vivan 1 year ago

Hmm, I'm a bit unsure about this one. I'll need to re-read the question and options carefully to make sure I understand what's being asked.

Kenny 1 year ago

This seems straightforward, I think the answer is A based on the information provided in the question.

Willodean 1 year ago

Wait, we're supposed to analyze the breached data? I thought we were just supposed to report it. This exam is getting more complicated by the minute!

Susana 1 year ago

Ah, the good old GDPR exam questions. Keeping us on our toes, as always. I wonder if they'll ask about the fines next...

Francoise 1 year ago

↳ replying to Susana

C) A copy of the breached personal data to be analyzed.

Marg 1 year ago

↳ replying to Susana

B) Contact information for all data subjects.

Xuan 1 year ago

↳ replying to Susana

A) The contact of the data protection officer or another point of contact where more information could be obtained.

Bulah 1 year ago

C? Really? Sending a copy of the breached data? That's a terrible idea and a clear GDPR violation!

Lawrence 1 year ago

↳ replying to Bulah

C) A copy of the breached personal data to be analyzed.

Shantay 1 year ago

↳ replying to Bulah

B) Contact information for all data subjects.

Desirae 1 year ago

↳ replying to Bulah

A) The contact of the data protection officer or another point of contact where more information could be obtained.

Anissa 1 year ago

I was sure B was the answer. Providing all the affected data subjects' contact details seems like the responsible thing to do.

Georgiana 1 year ago

↳ replying to Anissa

I was also leaning towards B, but it looks like the correct answer is actually A.

Carmen 1 year ago

↳ replying to Anissa

C) A copy of the breached personal data to be analyzed.

Jenifer 1 year ago

↳ replying to Anissa

B) Contact information for all data subjects.

Layla 1 year ago

↳ replying to Anissa

A) The contact of the data protection officer or another point of contact where more information could be obtained.

Jeannetta 2 years ago

A is the correct answer! The GDPR requires the notification to include the contact details of the data protection officer or another point of contact for more information.

Iluminada 1 year ago

↳ replying to Jeannetta

A is the correct answer! The GDPR requires the notification to include the contact details of the data protection officer or another point of contact for more information.

Ligia 1 year ago

↳ replying to Jeannetta

A) The contact of the data protection officer or another point of contact where more information could be obtained.

Albina 2 years ago

I'm not sure, but I think it's important to have a clear point of contact for data protection issues.

Ryann 2 years ago

I agree with Diane, because it makes sense to have a designated contact for handling data breaches.

Diane 2 years ago

I think the answer is A) The contact of the data protection officer or another point of contact where more information could be obtained.

Exin PDPF Exam - Topic 1 Question 81 Discussion