Exin Exam PDPF Topic 4 Question 79 Discussion

Actual exam question for Exin's PDPF exam

Question #: 79
Topic #: 4

[All PDPF Questions]

The GDPR refers to the principles of proportionality and subsidiarity. What is the meaning of subsidiarity in this context?

APersonal data may only be processed when there are no other means to achieve the purposes.

BPersonal data cannot be reused without explicit and informed consent.

CPersonal data can only be processed in accordance with the purpose specification.

DPersonal data must be adequate, relevant and not excessive in relation to the purposes.

Show Suggested Answer

Suggested Answer: A

Personal data can only be processed in accordance with the purpose specification. Incorrect. This is one of the legal limitations.

Personal data cannot be reused without explicit and informed consent. Incorrect. This is one of the legal limitations.

Personal data may only be processed when there are no other means to achieve the purposes. Correct. This is the definition of subsidiarity. (Literature: A, Chapter 3; GDPR Article 35(7))

Personal data must be adequate, relevant and not excessive in relation to the purposes. Incorrect. This is the definition of proportionality.

by Tuyet at Jan 22, 2025, 09:43 AM

Limited Time Offer

25%

Off

Get Premium PDPF Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Elli

5 days ago

I agree with Fredric, processing data only when there are no other means is in line with subsidiarity.

upvoted 0 times

...

Cassi

6 days ago

Gotta love these GDPR questions! I'm going with C - personal data can only be processed in accordance with the purpose specification.

upvoted 0 times

...

Fredric

10 days ago

I think option A is correct because it aligns with the principle of subsidiarity.

upvoted 0 times

...

Alaine

25 days ago

Hmm, I'm not so sure. D seems like the most logical answer, but I wouldn't be surprised if the exam tripped us up with a trick question.

upvoted 0 times

...

Emerson

27 days ago

Subsidiarity means processing data only when necessary.

upvoted 0 times

...

Fernanda

28 days ago

I'm pretty sure it's D. The GDPR requires personal data to be adequate, relevant, and not excessive in relation to the purposes for which it is processed.

upvoted 0 times

Eleonore

5 days ago

Yes, that's correct. It's important for organizations to ensure they only collect and process the data that is necessary for their specific purposes.

upvoted 0 times

...

Georgeanna

8 days ago

I think you're right. Subsidiarity in the context of GDPR means that personal data must be adequate, relevant, and not excessive in relation to the purposes.

upvoted 0 times

...

Corinne

29 days ago

I think the answer is A. The principle of subsidiarity means that personal data can only be processed when there are no other means to achieve the intended purpose.

upvoted 0 times

Dominque

17 days ago

Yes, it's all about ensuring that data processing is done in a way that respects privacy and limits unnecessary use.

upvoted 0 times

...

Shizue

19 days ago

That makes sense. It's important to only process personal data when absolutely necessary.

upvoted 0 times

...

Rodrigo

24 days ago

I agree with you, the answer is A. Subsidiarity in GDPR means personal data can only be processed when there are no other means.

upvoted 0 times

...