Exin Exam PDPF Topic 2 Question 61 Discussion

Actual exam question for Exin's PDPF exam

Question #: 61
Topic #: 2

[All PDPF Questions]

To comply with the General Data Protection Regulation (GDPR) it is necessary to create a procedure for reporting data breaches to the Supervisory Authority.

As the controller is a public administration agency, which option is a requirement for this procedure?

AIt must contain a step to perform a Data Protection Impact Analysis (DPIA).

BIt must include an audit step.

CIt should include a step to consult the Data Protection Officer (DPO) in order to determine whether notification to the Supervisory Authority is necessary.

DIt must contain a step to notify the data subject.

Show Suggested Answer

Suggested Answer: D

Data protection and privacy are complementary, but not the same thing.

A very repeated phrase is: ''It is possible to have security without privacy, but it is not possible to have privacy without security''.

Privacy is a right that must be protected, and Data Protection are the measures that will be used to achieve this protection.

by Mabel at May 21, 2024, 01:45 AM

Limited Time Offer

25%

Off

Get Premium PDPF Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Stephen

1 months ago

B is the way to go! An audit step is essential to ensure the breach reporting procedure is working properly. Although, I do hope the auditors have a better sense of humor than the GDPR itself. Maybe they'll throw in some interpretive dance moves, just to liven things up.

upvoted 0 times

Leatha

14 days ago

C) It should include a step to consult the Data Protection Officer (DPO) in order to determine whether notification to the Supervisory Authority is necessary.

upvoted 0 times

...

Jannette

21 days ago

B) It must include an audit step.

upvoted 0 times

...

Pansy

23 days ago

C) It should include a step to consult the Data Protection Officer (DPO) in order to determine whether notification to the Supervisory Authority is necessary.

upvoted 0 times

...

Erick

2 months ago

I'm going to go with option C. It's the only one that specifically mentions the DPO, and that's a crucial role in GDPR compliance. Plus, it has a nice ring to it: 'Consult the DPO, don't be a dope-o!'

upvoted 0 times

Willard

27 days ago

User 2: Yeah, it's important to involve the Data Protection Officer in these decisions.

upvoted 0 times

...

Vince

29 days ago

I think option C is the best choice.

upvoted 0 times

...

Jackie

1 months ago

User 1: I agree, option C seems like the right choice since it involves consulting the DPO.

upvoted 0 times

...

Reena

2 months ago

I'm not sure, but I think option A could also be necessary to assess the impact of the data breach.

upvoted 0 times

...

Dana

2 months ago

Option D seems like a good choice, but it's not a requirement for the public administration agency. The GDPR only requires notifying the data subject in certain cases, not as a mandatory step in the breach reporting procedure.

upvoted 0 times

...

Renato

2 months ago

I think option C is the correct answer. The GDPR requires that the controller consult the DPO to determine if notification to the Supervisory Authority is necessary. This is a key step in the breach reporting procedure.

upvoted 0 times