Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

PECB GDPR Exam - Topic 2 Question 14 Discussion

Questio n:Under GDPR, the controller must demonstrate that data subjects have consented to the processing of their personal data, and the consent must be freely given.What is the role of the DPO in ensuring compliance with this requirement?
B) The DPO should ensure that the controller has implemented procedures to provide evidence that consent has been obtained for all relevant personal data.
A) The DPO should ensure that the controller has informed data subjects about their right to withdraw consent.
C) The DPO should personally record information such as who consented, when they consented, and how consent was given.
D) The DPO should approve the legal basis for consent processing before the controller can collect personal data.

PECB GDPR Exam - Topic 2 Question 14 Discussion

Actual exam question for PECB's GDPR exam
Question #: 14
Topic #: 2
[All GDPR Questions]

Questio n:

Under GDPR, the controller must demonstrate that data subjects have consented to the processing of their personal data, and the consent must be freely given.

What is the role of the DPO in ensuring compliance with this requirement?

Show Suggested Answer Hide Answer
Suggested Answer: B

Under Article 7(1) of GDPR, controllers must be able to demonstrate that the data subject has given consent. The DPO advises on ensuring these procedures are in place but does not collect or approve consent directly.

Option B is correct because the DPO must verify that consent records exist and meet GDPR standards.

Option A is incorrect because informing data subjects about withdrawal rights is the controller's duty, not the DPO's.

Option C is incorrect because the DPO does not personally maintain consent logs.

Option D is incorrect because DPOs do not approve legal bases for processing---this is the controller's responsibility.


GDPR Article 7(1) (Controller must demonstrate valid consent)

GDPR Article 39(1)(b) (DPO ensures compliance with data protection obligations)

by Alline at Mar 30, 2026, 07:25 AM

Limited Time Offer

25%

Off

Get Premium GDPR Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Sarah
7 hours ago
I think B is the best choice. Evidence of consent is crucial.
upvoted 0 times
...
Alonso
5 days ago
Not sure if the DPO should be recording all that info personally. Sounds like a recipe for errors.
upvoted 0 times
...
Jesusita
11 days ago
B is spot on! Evidence of consent is crucial for compliance.
upvoted 0 times
...
Ty
16 days ago
Wait, the DPO has to approve the legal basis? That seems like a lot of responsibility!
upvoted 0 times
...
Elvera
2 months ago
I agree, but isn’t it also the controller’s job to keep track of consent records?
upvoted 0 times
...
Quentin
2 months ago
The DPO definitely needs to ensure data subjects know they can withdraw consent.
upvoted 0 times
...
Dominque
3 months ago
I vaguely recall that the DPO doesn't usually approve legal bases for processing, so option D might not be their responsibility.
upvoted 0 times
...
Thurman
3 months ago
I feel like we had a practice question that mentioned the DPO ensuring data subjects know they can withdraw consent, which might relate to option A.
upvoted 0 times
...
Celestine
3 months ago
I'm not entirely sure, but I think the DPO's role is more about oversight rather than recording consent details personally, so option C seems off.
upvoted 0 times
...
Ivan
4 months ago
I remember we discussed how the DPO plays a crucial role in ensuring that consent is properly documented, so I think option B makes sense.
upvoted 0 times
...

Save Cancel