MENU
After notifying the supervisory authority, what should be the first action the controller must take when it finds a security breach where unauthorized people have accessed personal data?
Suggested Answer: D
Get Premium PDPF Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
Data protection and privacy are complementary, but not the same thing.
A very repeated phrase is: ''It is possible to have security without privacy, but it is not possible to have privacy without security''.
Privacy is a right that must be protected, and Data Protection are the measures that will be used to achieve this protection.
37 comments · newest first
HY
Hyman
11 months ago
Surprised that some think notifying data subjects comes first!
JA
Javier
12 months ago
I thought contacting the DPO was the priority?
RI
Rickie
12 months ago
Wait, shouldn't we notify affected individuals first?
MA
Mable
12 months ago
Totally agree, understanding the breach is key!
LO
Lonny
1 year ago
The first step is to analyze if sensitive data was accessed.
LO
Louvenia
1 year ago
I thought registering a police report was more of a later step after assessing the breach. I hope I remember the order correctly!
MA
Maryann
1 year ago
I feel like contacting the DPO is important, but I can't recall if it's the very first step. Maybe it depends on the situation?
ID
Idella
1 year ago
I remember a practice question that emphasized notifying data subjects quickly, but I'm not sure if that comes before analyzing the breach.
SH
Sherman
1 year ago
I think the first action should be to analyze whether sensitive data has been accessed. It seems crucial to understand the extent of the breach first.
HE
Hester
1 year ago
Okay, a three-column layout with a mini-cart widget in the center column. I'm pretty confident I can figure this out using CSS grid or flexbox.
TR
Trevor
1 year ago
I'm leaning towards B - it's a RET of an ILF since the data store is maintained by the application.
MA
Marya
1 year ago
This seems straightforward to me. The file is used to configure the connection between the Android app and Firebase services, so option A is the correct answer. I'm confident in this choice.
BR
Brynn
1 year ago
Option A sounds like the safe bet. Get the DPO involved early on to make sure everything is handled properly.
DE
Dexter
1 year ago
Ha! I bet the controller is freaking out right now. Maybe they should just unplug the whole system and call it a day.
AN
Anisha
1 year ago
D) Notify data subjects that have been subject to a security breach.
BE
Bernardine
1 year ago
B) Analyze whether sensitive data has been accessed.
EA
Earnestine
1 year ago
A) Contact the DPO for formal notification to the Supervisory Authority.
GW
Gwenn
1 year ago
Hmm, I'm not sure. Option C about filing a police report seems like a good idea too, just to cover all bases.
LA
Lavina
1 year ago
D) Notify data subjects that have been subject to a security breach.
RO
Rochell
1 year ago
I think option C is a good idea, it's better to be safe than sorry.
BI
Billye
1 year ago
C) Register a Police Report at the cybercrime station.
IS
Isabella
1 year ago
B) Analyze whether sensitive data has been accessed.
HY
Hyman
1 year ago
A) Contact the DPO for formal notification to the Supervisory Authority.
NG
Ngoc
1 year ago
D) Notify data subjects that have been subject to a security breach.
KI
Kina
1 year ago
C) Register a Police Report at the cybercrime station.
GI
Gilma
1 year ago
C) Register a Police Report at the cybercrime station.
VA
Valentin
1 year ago
B) Analyze whether sensitive data has been accessed.
AU
Audry
1 year ago
A) Contact the DPO for formal notification to the Supervisory Authority.
JO
Jonell
1 year ago
B) Analyze whether sensitive data has been accessed.
IR
Irving
1 year ago
A) Contact the DPO for formal notification to the Supervisory Authority.
NO
Noel
1 year ago
I disagree, I believe D is the right choice. Notifying the data subjects is crucial to protect them from potential harm.
CR
Crista
2 years ago
I think option B is the correct answer. Analyzing the data accessed is the first step to understand the impact of the breach.
BU
Buddy
1 year ago
User 2: That makes sense. It's important to assess the extent of the breach before taking further actions.
CH
Chantell
1 year ago
User 1: I think option B is the correct answer. Analyzing the data accessed is the first step to understand the impact of the breach.
VE
Verlene
2 years ago
I think analyzing whether sensitive data has been accessed is also crucial before taking any further actions.
DU
Dustin
2 years ago
I agree with Salena. It's important to notify the authorities first to handle the breach properly.
SA
Salena
2 years ago
I think the first action should be to contact the DPO for formal notification to the Supervisory Authority.