MENU
Which of the following options is provided for in the GDPR and can be made by Member States?
Suggested Answer: C
Get Premium PDPF Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
Implement technical and organizational measures to ensure compliance. Incorrect. This is the task of the controller.
Investigate security breaches of corporate information. Incorrect. Only breaches of personal data are a concern of the supervisory authority.
Monitor and enforce the application of the GDPR. Correct. This is the main task of any supervisory authority. (Literature: A, Chapter 7)
39 comments · newest first
FL
Florinda
11 months ago
Wait, can they really penalize under D? That sounds harsh!
DA
Danica
11 months ago
C seems like a stretch, not sure they can audit like that.
LE
Leanora
11 months ago
I think B is also important, but not sure if it's allowed.
LO
Louisa
11 months ago
Totally agree, A is the way to go!
BU
Bulah
12 months ago
A is correct, Member States can approve national provisions.
AN
Antonio
12 months ago
I thought option D was about penalties, but I’m not clear if that’s something Member States can enforce directly under GDPR.
CL
Claribel
12 months ago
I feel like option C could be relevant, but I can't recall if auditing is specifically mentioned in the GDPR provisions for Member States.
GL
Glory
1 year ago
I'm not entirely sure, but I remember something about notifying data subjects in case of breaches, which might relate to option B.
CA
Carlota
1 year ago
I think option A sounds familiar since we discussed how Member States can have their own laws to complement GDPR.
DE
Devora
1 year ago
I think option A is the way to go here. The GDPR provides a framework, but leaves room for Member States to adapt it to their national context.
LU
Lucille
1 year ago
Hmm, I'm a bit unsure about this one. I know the GDPR gives Member States some flexibility, but I can't recall the specifics off the top of my head.
PE
Pete
1 year ago
I'm pretty confident this is option A. The GDPR allows Member States to approve national provisions for implementing the regulation.
DE
Derick
1 year ago
Okay, let me think this through. The GDPR sets the baseline, but allows Member States to make certain decisions, so I'm guessing option A is the right answer.
GL
Glen
1 year ago
I'm with Linwood on this one. Auditing security processes is where it's at. Although, a good old-fashioned penalty doesn't sound too bad either. Decisions, decisions...
ES
Estrella
1 year ago
It's important for Member States to have the option to approve national provisions for GDPR implementation.
HE
Herman
1 year ago
Why not both? Auditing security processes and imposing penalties could be a strong combination.
BO
Bong
1 year ago
I think penalties for controllers and processors are necessary to ensure accountability.
LU
Luann
1 year ago
I agree, auditing security processes is crucial for GDPR compliance.
AR
Aretha
1 year ago
Option A all the way! Gotta love those national provisions, am I right? GDPR is all about flexibility, baby!
JA
Jaime
1 year ago
Audit controller and processor safety processes is crucial for data protection.
KE
Keva
1 year ago
I think penalizing controllers and processors is also important to ensure compliance.
AL
Alpha
1 year ago
I agree, national provisions give Member States the flexibility they need.
TE
Teri
1 year ago
Hmm, I don't know. I'm stuck between B and D. The GDPR does mention something about forcing data breach notifications, but the penalty power also seems like a big deal. Maybe I'll just guess and hope for the best.
LU
Luisa
1 year ago
I'm not sure, but I think I'll go with D. Penalties can serve as a strong deterrent for non-compliance with GDPR.
CO
Cordie
1 year ago
I see your point, but I still think B is the best option. Data breach notifications are crucial for protecting data subjects.
EL
Elli
1 year ago
I disagree, I believe D is the right choice. Penalties for controllers and processors are a key aspect of GDPR enforcement.
RE
Reena
1 year ago
I think B is the correct answer. It's important for controllers to notify data subjects of breaches.
LI
Linwood
2 years ago
Come on, guys. It's clearly option C. The GDPR empowers authorities to audit the security measures of controllers and processors. That's a no-brainer.
CA
Cary
1 year ago
I agree with you, it's definitely option C. Authorities can audit controller and processor safety processes.
AD
Adolph
1 year ago
I think it's option A. Member States can approve national provisions for the implementation of GDPR.
ME
Mertie
2 years ago
I'm not so sure about that. I think option D might be the right answer - the GDPR gives member states the power to penalize controllers and processors for non-compliance.
LI
Lizette
2 years ago
But I believe D) Penalize controllers and processors is also important for enforcement.
JE
Jennie
2 years ago
I agree with Ardella, Member States can have their own provisions to implement GDPR.
NG
Nguyet
2 years ago
Option A seems like the obvious choice here. The GDPR allows member states to provide their own implementation guidelines, so that's gotta be it.
AD
Adelle
1 year ago
That's true, they can also penalize controllers and processors for non-compliance.
KA
Kathryn
1 year ago
D) Penalize controllers and processors.
AL
Allene
1 year ago
I think you're right, member states can definitely provide their own guidelines.
GA
Garry
1 year ago
A) Approve national provisions for implementation of GDPR.
AR
Ardella
2 years ago
I think A) Approve national provisions for implementation of GDPR is allowed by Member States.