MENU
According to the EDPB Guidelines 01/2021 on Examples regarding Personal Data Breach Notification, if exfiltration of job application data (submitted through online application forms and stored on a webserver) resulted in personal information being accessible to unauthorized persons, this would be primarily considered what kind of breach?
Suggested Answer: D
Get Premium CIPP/E Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
According to the EDPB Guidelines 01/2021 on Examples regarding Personal Data Breach Notification, a confidentiality breach occurs when personal data is disclosed or made available to unauthorized persons. This is the case when exfiltration of job application data from a website results in personal information being accessible to unauthorized persons, such as hackers or competitors. This type of breach may pose a high risk to the rights and freedoms of the data subjects, as it may lead to identity theft, fraud, discrimination, or reputational damage. Therefore, the data controller should notify the data subjects without undue delay, unless the data is encrypted or anonymized, or the controller has taken subsequent measures to ensure that the high risk is no longer likely to materialize.
37 comments · newest first
PA
Pamella
11 months ago
Really? I thought it might be an availability breach too!
KE
Kerry
11 months ago
No doubt, it's a confidentiality issue.
LA
Lashaunda
12 months ago
Wait, could it also be seen as an integrity breach?
CO
Cora
12 months ago
I agree, unauthorized access is all about confidentiality.
ED
Edmond
1 year ago
Definitely a confidentiality breach.
YV
Yvonne
1 year ago
I feel like I’ve seen examples where unauthorized access clearly pointed to a confidentiality breach, so I’m going with D as well.
EL
Elena
1 year ago
I’m a bit confused here. I thought integrity breaches were about data being altered, but this seems more about access.
MA
Marg
1 year ago
I remember practicing a similar question, and I think confidentiality breaches are specifically about unauthorized access. So, I would lean towards option D.
DE
Delsie
1 year ago
I think this might be a confidentiality breach since unauthorized access to personal data is involved, but I'm not entirely sure.
HE
Herminia
1 year ago
Wait, I'm a little confused. Is this about the integrity of the data, or its availability? I need to re-read the question and the guidelines more carefully to make sure I understand the distinction between the breach types.
GA
Galen
1 year ago
Okay, I think I've got this. Based on the EDPB examples, if the job application data was exfiltrated and made accessible to unauthorized parties, that would be considered a confidentiality breach. I'm confident in that answer.
TH
Thurman
1 year ago
Hmm, I'm a bit unsure about this one. The question mentions personal data being accessible to unauthorized persons, so I'm leaning towards confidentiality breach, but I want to double-check the definitions in the guidelines.
CH
Charlette
1 year ago
This seems like a straightforward question about data breach types. I'll carefully review the EDPB guidelines to determine which breach category best fits the scenario.
JO
Josephine
2 years ago
D) A confidentiality breach. Easy peasy. Although I did chuckle at the thought of it being an 'accuracy breach' - like, 'oops, we accidentally leaked all your private info, my bad!'
MY
Myra
2 years ago
D) A confidentiality breach. Yeah, definitely not an 'accuracy breach'!
VA
Vallie
2 years ago
D) A confidentiality breach. Easy peasy.
LI
Lindy
2 years ago
D) A confidentiality breach.
LE
Lenny
2 years ago
C) An availability breach.
ST
Stevie
2 years ago
B) An accuracy breach.
AN
Anjelica
2 years ago
A) An integrity breach.
KA
Kaycee
2 years ago
Hmm, I was debating between C and D, but D makes the most sense. Can't really call it an availability breach if the data was just accessed, not necessarily deleted or modified.
TI
Tiera
2 years ago
Definitely a confidentiality breach, as the unauthorized access compromised the confidentiality of the data.
AL
Albina
2 years ago
Confidentiality breach makes sense, as the personal information was exposed to unauthorized individuals.
RE
Renea
2 years ago
Yeah, the data being accessed by unauthorized persons definitely falls under confidentiality breach.
AR
Aracelis
2 years ago
I agree, it would be a confidentiality breach since unauthorized persons accessed personal information.
DE
Derick
2 years ago
I'm not sure, but I think it could also be considered an availability breach since the data might not be available to the rightful owner.
AR
Aracelis
2 years ago
I agree, D is the correct answer. This is a textbook example of a confidentiality breach. Seems pretty straightforward to me.
NO
Nohemi
2 years ago
I agree, D is the correct answer. This is a textbook example of a confidentiality breach. Seems pretty straightforward to me.
LE
Lettie
2 years ago
D) A confidentiality breach.
DE
Dean
2 years ago
C) An availability breach.
WI
William
2 years ago
B) An accuracy breach.
BE
Bernardine
2 years ago
A) An integrity breach.
CA
Catherin
2 years ago
I agree with Sherita, personal information being accessible to unauthorized persons definitely sounds like a confidentiality breach.
SH
Sherita
2 years ago
I think it would be a confidentiality breach.
SA
Sarah
2 years ago
D) A confidentiality breach. That's the obvious answer here - the unauthorized access to personal data is a clear breach of confidentiality.
JE
Jeanice
2 years ago
D) A confidentiality breach. That's the obvious answer here - the unauthorized access to personal data is a clear breach of confidentiality.
RI
Rikki
2 years ago
A) An integrity breach.