MENU
To comply with the General Data Protection Regulation (GDPR) it is necessary to create a procedure for reporting data breaches to the Supervisory Authority.
As the controller is a public administration agency, which option is a requirement for this procedure?
Suggested Answer: D
Get Premium PDPF Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
Data protection and privacy are complementary, but not the same thing.
A very repeated phrase is: ''It is possible to have security without privacy, but it is not possible to have privacy without security''.
Privacy is a right that must be protected, and Data Protection are the measures that will be used to achieve this protection.
35 comments · newest first
CA
Carey
11 months ago
I think an audit step is also essential for transparency!
OR
Oretha
11 months ago
A DPIA is important, but not always required for every breach.
EL
Elenore
11 months ago
Wait, do we really need to notify the data subject every time?
EU
Eura
11 months ago
I agree, consulting the DPO is crucial.
BE
Bethanie
12 months ago
Option C is definitely a must!
ST
Stevie
12 months ago
I thought notifying the data subject was mandatory in all cases, but I’m not sure if it’s a requirement for the procedure itself.
CR
Cristy
12 months ago
I practiced a similar question where the DPO's role was emphasized, so I’m leaning towards option C as well.
EL
Elliot
1 year ago
I’m a bit unsure, but I think a DPIA is more about assessing risks before processing data, not specifically for breach reporting.
ME
Melda
1 year ago
I remember that consulting the DPO is crucial for determining if a breach needs to be reported, so I think option C might be the right choice.
MA
Matt
1 year ago
I'm a little confused by this question. The options seem to be focused on specific steps in the procedure, but I'm not sure if all of those are actually required. I'll need to double-check the GDPR regulations to make sure I understand the exact requirements for public agencies.
EZ
Ezekiel
1 year ago
Hmm, I'm a bit unsure about this one. The GDPR requirements can be tricky to remember, and I want to make sure I don't miss anything important. I'll need to carefully review the options and think through the specific GDPR obligations for public agencies.
AN
Antonio
1 year ago
This seems pretty straightforward. The question is asking about the requirements for a data breach reporting procedure for a public administration agency under GDPR. I think the key is to focus on the specific options provided and determine which one is a requirement.
LI
Lindy
1 year ago
Okay, I've got this. The correct answer is C - the procedure must include a step to consult the Data Protection Officer (DPO) to determine if notification to the Supervisory Authority is necessary. That's a core requirement under GDPR for public agencies.
AU
Audry
1 year ago
I think the key here is understanding the different network topologies available with vSphere with Tanzu. The question is specifically asking about Layer 2 isolation between Tanzu Kubernetes clusters across namespaces, so I'll need to carefully review the options.
AL
Aliza
1 year ago
The answer has to be B, right? The question specifically mentions "client-side Java method", and container.send(employee) and session.send(employee) seem like the most logical choices.
ST
Stephen
1 year ago
B is the way to go! An audit step is essential to ensure the breach reporting procedure is working properly. Although, I do hope the auditors have a better sense of humor than the GDPR itself. Maybe they'll throw in some interpretive dance moves, just to liven things up.
LE
Leatha
1 year ago
C) It should include a step to consult the Data Protection Officer (DPO) in order to determine whether notification to the Supervisory Authority is necessary.
JA
Jannette
1 year ago
B) It must include an audit step.
PA
Pansy
1 year ago
C) It should include a step to consult the Data Protection Officer (DPO) in order to determine whether notification to the Supervisory Authority is necessary.
ER
Erick
2 years ago
I'm going to go with option C. It's the only one that specifically mentions the DPO, and that's a crucial role in GDPR compliance. Plus, it has a nice ring to it: 'Consult the DPO, don't be a dope-o!'
JO
Joni
1 year ago
Definitely, the DPO plays a key role in ensuring data protection.
LO
Lore
1 year ago
It's always good to involve the Data Protection Officer in these matters.
LA
Lang
1 year ago
I agree, consulting the DPO is important in GDPR compliance.
WI
Willard
1 year ago
User 2: Yeah, it's important to involve the Data Protection Officer in these decisions.
VI
Vince
1 year ago
I think option C is the best choice.
JA
Jackie
1 year ago
User 1: I agree, option C seems like the right choice since it involves consulting the DPO.
RE
Reena
2 years ago
I'm not sure, but I think option A could also be necessary to assess the impact of the data breach.
DA
Dana
2 years ago
Option D seems like a good choice, but it's not a requirement for the public administration agency. The GDPR only requires notifying the data subject in certain cases, not as a mandatory step in the breach reporting procedure.
RE
Renato
2 years ago
I think option C is the correct answer. The GDPR requires that the controller consult the DPO to determine if notification to the Supervisory Authority is necessary. This is a key step in the breach reporting procedure.
EL
Ellsworth
1 year ago
It's essential to have a clear process in place for reporting data breaches to ensure compliance with the GDPR.
AR
Arthur
1 year ago
I think option C is the most appropriate choice for this procedure.
GL
Glenna
1 year ago
Yes, it's important to follow the GDPR requirements when handling data breaches.
VA
Vallie
1 year ago
I agree, consulting the Data Protection Officer is crucial in determining if notification to the Supervisory Authority is necessary.
MA
Ma
2 years ago
I agree with Dick, option C makes sense to ensure compliance with GDPR regulations.
DI
Dick
2 years ago
I think option C is a requirement because the DPO needs to be consulted before notifying the Supervisory Authority.