MENU
After detecting an intrusion involving the theft of unencrypted personal data, who shall the breached company notify first under GDPR requirements?
Suggested Answer: B
Get Premium CIPP/E Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
16 comments · newest first
EL
Eladia
4 days ago
I think it's C. The supervisory authority needs to know first.
SA
Samira
10 days ago
True, but C is crucial for compliance.
CL
Claudia
15 days ago
I feel like A should be included if kids are involved.
GL
Glendora
20 days ago
But isn't C the priority? Legal obligations first!
JU
Junita
25 days ago
Definitely B too. Affected customers deserve to be informed.
EV
Eve
1 month ago
Agreed! They can help manage the situation.
BR
Brittni
1 month ago
I think it's C. The supervisory authority needs to know first.
MA
Mattie
1 month ago
Wow, I didn’t know that! Seems counterintuitive.
EL
Elin
2 months ago
Nope, it’s definitely the supervisory authority.
LE
Letha
2 months ago
Wait, are you sure? I thought it was the customers first.
UL
Ula
2 months ago
I agree, it’s all about reporting to the authority first!
KA
Kanisha
2 months ago
Definitely C) A competent supervisory authority. That's the rule.
AR
Arletta
2 months ago
From what I studied, the GDPR emphasizes notifying the supervisory authority first, but I could be mixing it up with other regulations.
RO
Rozella
2 months ago
I’m a bit confused; I thought they had to inform law enforcement before anyone else, but that might not be right.
FL
Flo
3 months ago
I remember practicing a similar question, and I believe it's about notifying affected customers after the authority.
LO
Lorenza
3 months ago
I think the company has to notify the supervisory authority first, but I'm not completely sure.