MENU
According to the GDPR, in what situation must data subjects always be notified of a personal data breach?
Suggested Answer: D
Get Premium PDPF Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
Data protection and privacy are complementary, but not the same thing.
A very repeated phrase is: ''It is possible to have security without privacy, but it is not possible to have privacy without security''.
Privacy is a right that must be protected, and Data Protection are the measures that will be used to achieve this protection.
32 comments · newest first
SH
Shad
11 months ago
I thought it was A at first, but D makes more sense.
MI
Mirta
12 months ago
Definitely D, the GDPR is all about protecting privacy.
LA
Laquita
12 months ago
Wait, are we sure about that? What if it's just a minor breach?
NO
Noelia
12 months ago
Totally agree, D is the right answer!
VE
Veda
1 year ago
It's D! High risk means notify the data subjects.
WA
Wade
1 year ago
I recall that the GDPR emphasizes the importance of notifying individuals when there's a significant probability of harm. So, I think option D makes the most sense here.
RE
Rene
1 year ago
I’m a bit confused about the specifics. I thought notification was required for any breach, but now I’m questioning if it’s only for significant risks.
VA
Valentin
1 year ago
I feel like we practiced a question similar to this, and it was about notifying data subjects when their rights are at risk. Could it be option D?
PE
Pearly
1 year ago
I think I remember that data subjects need to be notified when there's a high risk to their privacy, but I'm not entirely sure if that's the only condition.
SU
Sue
1 year ago
I'm leaning towards option 3 or 4. The question says the internal audit activity "may" assess or perform advisory services, which suggests those are optional responsibilities, not required ones.
KE
Kenneth
1 year ago
I'm a bit confused about the difference between DPM and DRM policies. I'll need to review those concepts again before answering.
MI
Milly
1 year ago
I thought Layer 7 was relevant too, but it feels like I might be mixing concepts from different topics.
TE
Tegan
1 year ago
Hmm, I wasn't sure at first, but D makes the most sense. Notification is all about protecting the data subjects, so that's the one that aligns with the GDPR's goals.
MI
Miesha
1 year ago
Absolutely, it's important to prioritize the protection of data subjects' privacy in case of a breach.
GL
Glendora
1 year ago
Yes, notifying data subjects in situations where there is a high risk to their privacy is crucial for GDPR compliance.
CE
Cecily
1 year ago
I agree, D seems to be the most relevant option in terms of protecting the data subjects.
ED
Edgar
1 year ago
D) When there is a significant probability that the breach will lead to a high risk for the privacy of the data subjects
EL
Elfriede
1 year ago
C) When the system on which the personal data is processed is attacked causing damage to its storage devices
AL
Alpha
1 year ago
B) When personal data is processed by a party that agreed to the draft processing contract but has not yet signed it
BO
Bo
1 year ago
A) When personal data is processed at a facility of the processor that is not located within the borders of the EEA
MY
Myra
1 year ago
Haha, these GDPR questions can really trip you up if you're not careful! I'm glad D is the right answer - gotta love those high-risk privacy breaches.
JE
Jeff
1 year ago
I was a bit confused at first, but after reading through the options, D is definitely the correct answer. Notification is required when the breach is likely to result in a high risk to individuals.
JA
Janae
1 year ago
Absolutely, GDPR emphasizes the importance of transparency and communication with data subjects in case of personal data breaches.
SH
Shanda
1 year ago
Yes, notifying data subjects in such situations is crucial to protect their privacy and allow them to take necessary precautions.
CR
Cristy
1 year ago
I agree, D is the correct answer. It's important to notify data subjects when there is a high risk to their privacy.
PE
Percy
1 year ago
D seems like the obvious choice here. The GDPR clearly states that data subjects must be notified when a breach poses a high risk to their privacy.
AD
Adelle
1 year ago
Definitely, option D is the most appropriate response according to the GDPR regulations.
TA
Tasia
1 year ago
Yes, option D is in line with the GDPR requirements for notifying data subjects of personal data breaches.
SA
Sarah
1 year ago
I agree, option D is the correct choice. It's important to notify data subjects when their privacy is at risk.
IR
Irma
2 years ago
I'm not sure, but it makes sense to inform them when there's a high risk to their privacy.
TR
Tracie
2 years ago
I agree with Huey, notifying data subjects in high-risk situations is crucial.
HU
Huey
2 years ago
I think the answer is D.