New Year Sale 2026! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Exin PDPF Exam - Topic 3 Question 64 Discussion

Actual exam question for Exin's PDPF exam
Question #: 64
Topic #: 3
[All PDPF Questions]

Who should ask for an opinion after conducting an impact assessment on the protection of personal data (DPIA)?

Show Suggested Answer Hide Answer
Suggested Answer: D

Data protection and privacy are complementary, but not the same thing.

A very repeated phrase is: ''It is possible to have security without privacy, but it is not possible to have privacy without security''.

Privacy is a right that must be protected, and Data Protection are the measures that will be used to achieve this protection.


Contribute your Thoughts:

0/2000 characters
Virgie
3 months ago
Not sure if the Processor needs to ask anyone, seems odd.
upvoted 0 times
...
Juliana
3 months ago
I thought the Supervisory Authority had to be consulted too?
upvoted 0 times
...
Salina
3 months ago
Wait, isn't the DPO also involved in this?
upvoted 0 times
...
Raina
4 months ago
Totally agree, it's their responsibility!
upvoted 0 times
...
Vallie
4 months ago
I think the Controller should definitely ask for opinions.
upvoted 0 times
...
Gearldine
4 months ago
I believe it’s definitely the controller who should ask for an opinion, but I might be mixing it up with another question we practiced.
upvoted 0 times
...
Mike
4 months ago
I’m a bit confused; I thought the supervisory authority was supposed to be consulted, but maybe that’s only in specific cases?
upvoted 0 times
...
Whitley
4 months ago
I remember a practice question where the DPO was involved, but I feel like the controller has the final say in this situation.
upvoted 0 times
...
Chanel
5 months ago
I think the controller is the one who should ask for an opinion after a DPIA, but I'm not completely sure.
upvoted 0 times
...
Nguyet
5 months ago
Based on my understanding, the controller is responsible for conducting the DPIA and then seeking the opinion of the data protection officer before proceeding. This helps ensure the DPIA is thorough and the risks are properly addressed.
upvoted 0 times
...
Kizzy
5 months ago
Wait, I thought the supervisory authority was involved in the DPIA process somehow. I'm a little confused on the exact details here. I'll have to review the GDPR requirements again.
upvoted 0 times
...
Ressie
5 months ago
Okay, I've got this. The GDPR states that the controller should ask for the opinion of the data protection officer after completing a DPIA. I'm feeling good about this response.
upvoted 0 times
...
Regenia
5 months ago
Hmm, I'm a bit unsure about this one. I remember learning about DPIAs, but I can't quite recall who is responsible for getting an opinion after conducting one. Let me think this through carefully.
upvoted 0 times
...
Chantell
5 months ago
This seems like a straightforward question about GDPR compliance. I'm pretty confident I know the answer, but I'll double-check my notes just to be sure.
upvoted 0 times
...
Jill
5 months ago
Okay, I think I've got it. The question is describing a social engineering attack, where you trick people into revealing confidential info.
upvoted 0 times
...
Jackie
5 months ago
I'm a bit confused on this one. Is a Smart List the right choice since the status options are predefined? Or would an Attribute Dimension be better to handle the changing status?
upvoted 0 times
...
Johnna
5 months ago
I studied about the different types of verbal operants, and I'm leaning towards a mand, but I could be confusing it with tact.
upvoted 0 times
...
Lacresha
5 months ago
Username and password is the classic, but I bet biometrics or a smart card would be more secure. Gotta weigh the convenience factor too.
upvoted 0 times
...
Hermila
9 months ago
I bet the correct answer is 'all of the above'. That's how they get you on these certification exams!
upvoted 0 times
Isabella
8 months ago
D) Processor
upvoted 0 times
...
Felicidad
8 months ago
C) Supervisory Authority
upvoted 0 times
...
Candra
8 months ago
B) Controller
upvoted 0 times
...
Hillary
8 months ago
A) DPO
upvoted 0 times
...
...
Hyun
9 months ago
Wait, the processor can give an opinion? I thought they just processed the data and didn't have a say in data protection.
upvoted 0 times
Gilma
8 months ago
It's important to involve all relevant parties in the decision-making process.
upvoted 0 times
...
Wilda
8 months ago
Yes, processors can provide their opinion based on their role in data processing.
upvoted 0 times
...
Paris
8 months ago
Processors can provide input on data protection measures.
upvoted 0 times
...
Audry
8 months ago
D) Processor
upvoted 0 times
...
Rodrigo
8 months ago
C) Supervisory Authority
upvoted 0 times
...
Daron
8 months ago
B) Controller
upvoted 0 times
...
Lauran
9 months ago
A) DPO
upvoted 0 times
...
...
Alishia
10 months ago
Hah, the supervisory authority? They're probably too busy playing 'guess the next data breach' to care about our DPIA!
upvoted 0 times
Jacquelyne
9 months ago
C) Supervisory Authority
upvoted 0 times
...
Lenna
9 months ago
B) Controller
upvoted 0 times
...
Thora
10 months ago
A) DPO
upvoted 0 times
...
...
Lucy
10 months ago
I think the DPO is the best choice here. They have the expertise to evaluate the DPIA and provide an informed opinion.
upvoted 0 times
Kasandra
8 months ago
True, but the DPO is more specialized in this area.
upvoted 0 times
...
Antonio
8 months ago
The Controller could also be involved.
upvoted 0 times
...
Reena
8 months ago
I agree, the DPO is the best choice.
upvoted 0 times
...
Tamala
8 months ago
DPO should ask for an opinion.
upvoted 0 times
...
...
Melita
10 months ago
But shouldn't the Supervisory Authority also be involved in giving their opinion?
upvoted 0 times
...
Angella
10 months ago
I agree with Georgeanna, the DPO is responsible for data protection.
upvoted 0 times
...
Georgeanna
10 months ago
I think the DPO should ask for an opinion.
upvoted 0 times
...
Susy
11 months ago
But shouldn't the Supervisory Authority also be involved in giving their opinion?
upvoted 0 times
...
Lemuel
11 months ago
I agree with Veta, the DPO is responsible for data protection.
upvoted 0 times
...
Thad
11 months ago
The controller should definitely ask for an opinion on the DPIA. They're the ones responsible for data protection after all.
upvoted 0 times
Gregoria
9 months ago
Yes, the DPO plays a key role in advising on data protection matters.
upvoted 0 times
...
Richelle
10 months ago
But isn't the DPO also involved in the decision-making process?
upvoted 0 times
...
Jarod
10 months ago
I agree, the controller is ultimately responsible for data protection.
upvoted 0 times
...
Edmond
10 months ago
The controller should definitely ask for an opinion on the DPIA.
upvoted 0 times
...
...
Veta
11 months ago
I think the DPO should ask for an opinion.
upvoted 0 times
...

Save Cancel