MENU
A personal data breach has occurred, and the controller is writing a draft notification for the supervisory authority. The following information is already in the notification:
- The nature of the personal data breach and its possible consequences.
- Information regarding the parties that can provide additional information about the data breach.
What other information must the controller provide?
Suggested Answer: A
Get Premium PDPF Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
To advise the controller on the mitigation of privacy risks to protect the controller from liability claims for non-compliance. Incorrect. The supervisory authority has the task to monitor compliance and to advise on enhancements, but its purpose is not to protect the controller.
To fulfill the obligation in the GDPR to implement appropriate technical and organizational measures for data protection. Incorrect. The audit is not the implementation of the measures, but an assessment of the effectiveness of them.
To monitor and enforce the application of the GDPR by assessing that processing is performed in compliance with the GDPR. Correct. According to the GDPR this is an important task of a supervisory authority. (Literature: A, Chapter 7; GDPR Article 57 (1)(a))
34 comments · newest first
RA
Rachael
11 months ago
Agreed, mitigation measures are crucial to prevent further issues!
LE
Lera
11 months ago
Wait, why would they need to provide access info for the breached data?
RO
Rodolfo
11 months ago
Not sure about sharing data subjects' details, seems risky.
LE
Lenna
11 months ago
I think they should also inform local authorities.
RO
Rozella
12 months ago
Definitely need to include suggested measures to mitigate the breach!
TA
Tawny
12 months ago
I’m confused about the need for accessing information about the breached data. Isn’t that a bit too much detail for the notification?
GI
Gianna
12 months ago
I practiced a similar question, and I feel like we should definitely mention the contact details of the data subjects. It makes sense to keep them informed.
MY
My
1 year ago
I'm not entirely sure, but I remember something about notifying authorities. Is that what option A is about?
LU
Ludivina
1 year ago
I think we need to include suggested measures to mitigate the adverse consequences. That seems important, right?
VI
Virgina
1 year ago
I feel pretty confident that the answer is C. The question is specifically asking what other information the controller must provide, and the suggested measures to mitigate the adverse consequences seems like the most relevant and complete answer.
JO
Joanna
1 year ago
I'm a bit confused. Shouldn't the controller also need to inform local and national authorities about the data breach? I'm not sure if that's the right answer, but it seems like important information to include.
JI
Jillian
1 year ago
Okay, let me think this through. The question is asking what other information the controller must provide, so the answer is likely C - suggested measures to mitigate the adverse consequences.
LA
Laquita
1 year ago
Hmm, I'm not sure about this one. Do we need to include the names and contact details of the data subjects whose data may have been breached?
NO
Norah
1 year ago
This seems straightforward - the controller needs to provide suggested measures to mitigate the adverse consequences of the data breach.
AR
Arthur
1 year ago
This seems straightforward to me. The expired Apple sToken or Push Notification certificate is the most logical explanation for the iOS email failure. I'll double-check those settings first before looking into any other potential causes.
MA
Mariann
1 year ago
I'm pretty confident this is the right command. The solution provided looks correct - "kubectl events deployment api" should display the events for the api deployment.
KA
Kayleigh
1 year ago
Option D - 'The information needed to access the personal data that have been breached.' Ah, the classic 'give the thieves the keys to the vault' approach. Bold move, let's see how it plays out!
SA
Sabine
1 year ago
C) Suggested measures to mitigate the adverse consequences of the data breach.
PE
Pearline
1 year ago
B) Name and contact details of the data subjects whose data may have been breached
PH
Phyliss
1 year ago
A) Information of local and national authorities that were informed about the data breach.
TR
Trinidad
1 year ago
Option A is tempting, but I think the focus should be on addressing the breach, not just informing the authorities. C is the way to go.
GR
Gregoria
1 year ago
Absolutely, taking action to address the breach is more important than just informing the authorities.
CA
Catrice
1 year ago
Yes, that should be the priority to protect the data subjects and prevent further harm.
RY
Ryan
1 year ago
I agree, providing suggested measures to mitigate the adverse consequences of the data breach is crucial.
RH
Rhea
1 year ago
Hah, option B would be a real privacy nightmare! Imagine having to give out all the data subjects' contact details. That's a hard pass.
JA
Janna
1 year ago
That does sound like a privacy nightmare. I agree, giving out all the data subjects' contact details is a hard pass.
DO
Dorothy
1 year ago
B) Name and contact details of the data subjects whose data may have been breached
DE
Deja
1 year ago
C) Suggested measures to mitigate the adverse consequences of the data breach.
VI
Vicky
1 year ago
A) Information of local and national authorities that were informed about the data breach.
KE
Kenda
1 year ago
I'm not sure about option D. Providing the information needed to access the breached data seems like a bad idea - that could lead to further misuse of the data.
MA
Marlon
2 years ago
Option C seems like the right choice here. The controller should provide the supervisory authority with suggestions on how to mitigate the impact of the data breach.
TI
Tijuana
2 years ago
I think the controller should also include suggested measures to mitigate the adverse consequences of the data breach.
KA
Kandis
2 years ago
I agree with Jess. It's important for the data subjects to know if their data may have been breached.
JE
Jess
2 years ago
I think the controller should provide the name and contact details of the data subjects.