IAPP Exam CIPM Topic 8 Question 53 Discussion

Actual exam question for IAPP's CIPM exam

Question #: 53
Topic #: 8

[All CIPM Questions]

What is one obligation that the General Data Protection Regulation (GDPR) imposes on data processors?

ATo honor all data access requests from data subjects.

BTo inform data subjects about the identity and contact details of the controller.

CTo implement appropriate technical and organizational measures that ensure an appropriate level of security.

DTo carry out data protection impact assessments in cases where processing is likely to result in high risk to the rights and freedoms of individuals.

Show Suggested Answer

Suggested Answer: B

The first stage in the incident response plan under the General Data Protection Regulation (GDPR) for this scenario would be to contain the impact of the breach. This means taking immediate action to stop the unauthorized access or disclosure of personal data, and to prevent it from happening again in the future. This could involve revoking access to the data, notifying the employee who mistakenly sent the data, and implementing security measures to prevent similar breaches from occurring in the future.

https://gdpr-info.eu/art-33-gdpr/

https://gdpr-info.eu/art-34-gdpr/

by Micaela at Oct 21, 2023, 02:40 AM

Limited Time Offer

25%

11 days ago

I think the GDPR requires data processors to implement security measures.

upvoted 0 times

...