Exin Exam PDPF Topic 9 Question 51 Discussion

Actual exam question for Exin's PDPF exam

Question #: 51
Topic #: 9

[All PDPF Questions]

A company CEO travels to a meeting in another city. He takes a notebook with information about the company's new projects and acquisitions, which will be the subject of discussion at this meeting. These are the only data stored on the notebook.

The notebook accidentally falls into the hotel's pool and all data is lost.

What happened, considering the General Data Protection Regulation (GDPR)?

AA security incident

BA vulnerability

CA data breach

DA security risk

Show Suggested Answer

Suggested Answer: A

To advise the controller on the mitigation of privacy risks to protect the controller from liability claims for non-compliance. Incorrect. The supervisory authority has the task to monitor compliance and to advise on enhancements, but its purpose is not to protect the controller.

To fulfill the obligation in the GDPR to implement appropriate technical and organizational measures for data protection. Incorrect. The audit is not the implementation of the measures, but an assessment of the effectiveness of them.

To monitor and enforce the application of the GDPR by assessing that processing is performed in compliance with the GDPR. Correct. According to the GDPR this is an important task of a supervisory authority. (Literature: A, Chapter 7; GDPR Article 57 (1)(a))

by Matthew at Dec 10, 2023, 03:51 PM

Limited Time Offer

25%

Off

Get Premium PDPF Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Annalee

24 days ago

Can we talk about the real issue here? The CEO's backstroke game needs some serious work if he's losing company data in the pool. Maybe he should consider a floatie next time.

upvoted 0 times

Leslee

2 days ago

A) A security incident

upvoted 0 times

...

Malissa

26 days ago

Oh no, the CEO better hope his swim was worth it! This is clearly a data breach, so option C is the way to go.

upvoted 0 times

Matt

19 days ago

User 2: Definitely, that sounds like a data breach to me.

upvoted 0 times

...

Yolando

20 days ago

User 1: Oh no, the CEO better hope his swim was worth it!

upvoted 0 times

...

Mickie

1 months ago

Hmm, I'm not sure. Could it also be considered a vulnerability in the company's data security practices? Maybe option B is a valid answer too.

upvoted 0 times

Stephaine

4 days ago

User 3: Maybe it's both a data breach and a security incident.

upvoted 0 times

...

Noble

23 days ago

User 2: I think it's more of a security incident.

upvoted 0 times

...

Delisa

28 days ago

User 1: It could be a data breach.

upvoted 0 times

...

Shaun

1 months ago

I agree, this is a security incident. The data on the notebook was not properly secured, which led to a data breach. Option C is the right choice here.

upvoted 0 times

Dong

30 days ago

A) A security incident

upvoted 0 times

...

Eden

2 months ago

But couldn't it also be considered a security incident since the CEO failed to protect the data properly?

upvoted 0 times

...

Gwenn

2 months ago

I agree with Willie, losing sensitive company information like that definitely falls under GDPR as a data breach.

upvoted 0 times

...

Willie

2 months ago

I think it's a data breach.

upvoted 0 times

...

Ernie

2 months ago

But couldn't it also be considered a security incident since the CEO failed to protect the data properly?

upvoted 0 times

...

Jerry

2 months ago

This is definitely a security incident under GDPR. The CEO's notebook containing sensitive company information was lost, and the data is now compromised. Option A is the correct answer.

upvoted 0 times