Discuss Exin PDPF Exam Topic 1 Question 87

A controller wants to switch processors. What is necessary to review before making this change, so that it remains GDPR compliant?

AThe matrix location of this new processor.

BRequire the old processor to erase data.

CRequire the old processor to port the data.

DVerify that the new processor has sufficient security guarantees.

Suggested Answer: D

Verify that the processor has sufficient security guarantees that are essential for the Controller to remain in

compliance with the GDPR. Remember that the responsibility is always of the controller who must take care of the data of the data subjects that have been entrusted to him.

Recital 81 mentions the following:

(81) To ensure compliance with the requirements of this Regulation in respect of the processing to be carried out by the processor on behalf of the controller, when entrusting a processor with processing activities, the controller should use only processors providing sufficient guarantees, in particular in terms of expert knowledge, reliability and resources, to implement technical and organizational measures which will meet the requirements of this Regulation, including for the security of processing. The adherence of the processor to an approved code of conduct or an approved certification mechanism may be used as an element to demonstrate compliance with the obligations of the controller.

Get Premium PDPF Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

26 comments · newest first

Junita 10 months ago

Wait, do we really need the old processor to erase data?

Desiree 10 months ago

I agree, security is key for GDPR compliance!

Marshall 10 months ago

Definitely need to check the new processor's security guarantees.

Ramonita 11 months ago

The location of the new processor matters too, right?

Pete 11 months ago

Not sure if all this is necessary, seems a bit overboard.

Lizette 11 months ago

I thought the location of the new processor was important too, but I can't recall if it was the main focus for GDPR compliance.

Sunny 11 months ago

I feel like this question is similar to one we practiced about data transfers. Verifying security guarantees sounds familiar.

Lashawn 12 months ago

I'm not entirely sure, but I remember something about needing the old processor to erase data before switching.

Cassie 12 months ago

I think we need to check the security measures of the new processor, right? That seems crucial for GDPR compliance.

Anissa 1 year ago

Ah, I see - we need to make sure the new processor has sufficient security measures in place to protect the personal data. That makes sense as the key requirement here.

Jenelle 1 year ago

The matrix location of the new processor doesn't seem relevant for GDPR compliance. I think the security guarantees and data handling processes are the most important things to review.

Kenneth 1 year ago

I'm a bit confused - do we need to worry about the old processor erasing or porting the data as well? Seems like there are a few important factors to consider.

Fredric 1 year ago

Verifying the security guarantees of the new processor is definitely the key thing to focus on here. GDPR compliance is all about protecting personal data.

Kenia 1 year ago

This seems like a tricky GDPR compliance question. I'll need to carefully review the data processing requirements before switching processors.

Elenore 1 year ago

Porting the data to the new processor might be necessary for compliance.

Renato 1 year ago

Ah, the old 'erase the data' trick. Classic, but not gonna cut it. Option D is the way to stay GDPR compliant, no doubt.

Merilyn 1 year ago

I think we should also require the old processor to erase data.

Thaddeus 1 year ago

We need to review the security guarantees of the new processor.

Tracie 1 year ago

Matrix location? Really? This isn't some sci-fi movie, folks. Let's keep it real and go with option D.

Chara 1 year ago

↳ replying to Tracie

Option D is the way to go. We need to make sure the new processor is secure.

Virgilio 1 year ago

Porting the data? What is this, the dark ages? Definitely gotta verify the security guarantees, as option D suggests.

Garry 1 year ago

Haha, erasing the data? Yeah, right, like that's gonna fly with the GDPR police. Option D is the only sensible choice here.

Lewis 1 year ago

Option D is the way to go. You gotta make sure that new processor is GDPR-ready, no exceptions!

Elza 1 year ago

↳ replying to Lewis

Absolutely, GDPR compliance is non-negotiable. We have to prioritize data protection when switching processors.

Kenny 1 year ago

↳ replying to Lewis

Agreed, we can't risk any data breaches. It's crucial to verify the new processor's security guarantees.

Lenora 1 year ago

↳ replying to Lewis

Option D is definitely important. We need to ensure the new processor has strong security measures in place.

Exin PDPF Exam - Topic 1 Question 87 Discussion