Exin PDPF Exam - Topic 6 Question 41 Discussion

Actual exam question for Exin's PDPF exam

Question #: 41
Topic #: 6

[All PDPF Questions]

According to the GDPR, in what situation must data subjects always be notified of a personal data breach?

AWhen personal data is processed at a facility of the processor that is not located within the borders of the EEA

BWhen personal data is processed by a party that agreed to the draft processing contract but has not yet signed it

CWhen the system on which the personal data is processed is attacked causing damage to its storage devices

DWhen there is a significant probability that the breach will lead to a high risk for the privacy of the data subjects

Show Suggested Answer

Suggested Answer: D

Data protection and privacy are complementary, but not the same thing.

A very repeated phrase is: ''It is possible to have security without privacy, but it is not possible to have privacy without security''.

Privacy is a right that must be protected, and Data Protection are the measures that will be used to achieve this protection.

by Ruthann at Mar 31, 2023, 09:07 AM

Limited Time Offer

25%

Off

Get Premium PDPF Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Shad

5 months ago

I thought it was A at first, but D makes more sense.

upvoted 0 times

...

Mirta

6 months ago

Definitely D, the GDPR is all about protecting privacy.

upvoted 0 times

...

Laquita

6 months ago

Wait, are we sure about that? What if it's just a minor breach?

upvoted 0 times

...

Noelia

6 months ago

Totally agree, D is the right answer!

upvoted 0 times

...

Veda

6 months ago

It's D! High risk means notify the data subjects.

upvoted 0 times

...

Wade

6 months ago

I recall that the GDPR emphasizes the importance of notifying individuals when there's a significant probability of harm. So, I think option D makes the most sense here.

upvoted 0 times

...

Rene

6 months ago

I’m a bit confused about the specifics. I thought notification was required for any breach, but now I’m questioning if it’s only for significant risks.

upvoted 0 times

...

Valentin

6 months ago

I feel like we practiced a question similar to this, and it was about notifying data subjects when their rights are at risk. Could it be option D?

upvoted 0 times

...

Pearly

6 months ago

I think I remember that data subjects need to be notified when there's a high risk to their privacy, but I'm not entirely sure if that's the only condition.

upvoted 0 times

...

Sue

7 months ago

I'm leaning towards option 3 or 4. The question says the internal audit activity "may" assess or perform advisory services, which suggests those are optional responsibilities, not required ones.

upvoted 0 times

...

Kenneth

7 months ago

I'm a bit confused about the difference between DPM and DRM policies. I'll need to review those concepts again before answering.

upvoted 0 times

...

Milly

7 months ago

I thought Layer 7 was relevant too, but it feels like I might be mixing concepts from different topics.

upvoted 0 times

...

Tegan

11 months ago

Hmm, I wasn't sure at first, but D makes the most sense. Notification is all about protecting the data subjects, so that's the one that aligns with the GDPR's goals.

upvoted 0 times

Miesha

10 months ago

Absolutely, it's important to prioritize the protection of data subjects' privacy in case of a breach.

upvoted 0 times

...

Glendora

10 months ago

Yes, notifying data subjects in situations where there is a high risk to their privacy is crucial for GDPR compliance.

upvoted 0 times

...

Cecily

10 months ago

I agree, D seems to be the most relevant option in terms of protecting the data subjects.

upvoted 0 times

...

Edgar

10 months ago

D) When there is a significant probability that the breach will lead to a high risk for the privacy of the data subjects

upvoted 0 times

...

Elfriede

10 months ago

C) When the system on which the personal data is processed is attacked causing damage to its storage devices

upvoted 0 times

...

Alpha

10 months ago

B) When personal data is processed by a party that agreed to the draft processing contract but has not yet signed it

upvoted 0 times

...

Bo

11 months ago

A) When personal data is processed at a facility of the processor that is not located within the borders of the EEA

upvoted 0 times

...

Myra

11 months ago

Haha, these GDPR questions can really trip you up if you're not careful! I'm glad D is the right answer - gotta love those high-risk privacy breaches.

upvoted 0 times

...

Jeff

11 months ago

I was a bit confused at first, but after reading through the options, D is definitely the correct answer. Notification is required when the breach is likely to result in a high risk to individuals.

upvoted 0 times