MENU
It a company receives an anonymous email demanding ransom for the stolen personal data of its clients, what must the company do next, per GDPR requirements'3
Suggested Answer: C
Get Premium CIPP/E Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
12 comments · newest first
WI
Wilbert
12 months ago
Wait, they only have 72 hours? That seems so short!
CH
Cherri
1 year ago
A and C are also important steps, but B comes first.
AL
Allene
1 year ago
I thought they had to notify clients right away?
VI
Vicky
1 year ago
Definitely B! Investigating the scope is crucial.
IR
Ira
1 year ago
The company must notify the supervisory authority within 72 hours.
FL
Flo
1 year ago
I practiced a question similar to this, and I think they need to notify clients right away, but I’m not sure if that’s the best first step.
KA
Kallie
1 year ago
I feel like notifying the police is necessary, but I can't recall if it's the first thing they should do. Is that option A?
YV
Yvonne
1 year ago
I'm not entirely sure, but I remember something about notifying the supervisory authority being important too. Maybe that's option C?
CA
Carline
1 year ago
I think the company should definitely start an investigation first to understand what happened. That seems like a crucial step.
MI
Micah
1 year ago
Hmm, I'm not sure about this one. I'll have to review the company's policies on using work email for personal matters.
NA
Natalie
1 year ago
This seems straightforward enough. I'd go with checking the Nginx logs for response times. That's probably the most direct way to identify the root cause of the slow page loads.
LA
Lavera
1 year ago
I think the active-active replication option is crucial here, but I'm not entirely sure if A or C is the best choice. It feels like both have similar elements.