Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25

- Free Preparation Discussions

IAPP CIPM Exam - Topic 1 Question 103 Discussion

Actual exam question for IAPP's CIPM exam

Question #: 103
Topic #: 1

[All CIPM Questions]

According to the General Data Protection Regulation (GDPR), the requirements of a Data Protection Impact Assessment (DPIA) include that it?

ABe reported to the corresponding supervisory authority.

BPublish the report to demonstrate the transparency of the data processing.

CProvide a description of the proposed processing operation and its purpose.

DIs required if the processing activity entails risk to the rights and freedoms of an EU individual.

Show Suggested Answer

Suggested Answer: C

by Lauryn at Jul 19, 2026, 01:12 AM

Limited Time Offer

25%

Off

Get Premium CIPM Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Rima

4 days ago

I vaguely recall something about publishing the report for transparency, but I can't remember if that's a strict requirement. Maybe B is relevant?

upvoted 0 times

...

Lelia

9 days ago

I practiced a similar question where the DPIA had to describe the processing operation, so I think C is also a strong contender.

upvoted 0 times

...

Avery

14 days ago

I’m not entirely sure about the reporting part. I feel like it might be A, but I also think it could be more about internal documentation.

upvoted 0 times

...

Dulce

20 days ago

I remember that a DPIA is necessary when there's a risk to individuals' rights, so I think D is definitely correct.

upvoted 0 times

...