Exin Exam PDPF Topic 4 Question 79 Discussion

Actual exam question for Exin's PDPF exam

Question #: 79
Topic #: 4

[All PDPF Questions]

The GDPR refers to the principles of proportionality and subsidiarity. What is the meaning of subsidiarity in this context?

APersonal data may only be processed when there are no other means to achieve the purposes.

BPersonal data cannot be reused without explicit and informed consent.

CPersonal data can only be processed in accordance with the purpose specification.

DPersonal data must be adequate, relevant and not excessive in relation to the purposes.

Show Suggested Answer

Suggested Answer: A

Personal data can only be processed in accordance with the purpose specification. Incorrect. This is one of the legal limitations.

Personal data cannot be reused without explicit and informed consent. Incorrect. This is one of the legal limitations.

Personal data may only be processed when there are no other means to achieve the purposes. Correct. This is the definition of subsidiarity. (Literature: A, Chapter 3; GDPR Article 35(7))

Personal data must be adequate, relevant and not excessive in relation to the purposes. Incorrect. This is the definition of proportionality.

by Tuyet at Jan 22, 2025, 09:43 AM

Limited Time Offer

25%

Off

Get Premium PDPF Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Ressie

1 months ago

I wonder if the exam writers are trying to 'GDPR' us with this one. I'm sticking with A just to be safe.

upvoted 0 times

...

Lynelle

1 months ago

Subsidiarity? More like 'subsidiary' pain in the neck! Seriously though, I think D is the right answer.

upvoted 0 times

Lizette

17 days ago

I agree, subsidiarity is all about making sure data is proportional to the purpose.

upvoted 0 times

...

Corinne

26 days ago

I think D is correct. It means personal data must be relevant and not excessive.

upvoted 0 times

...

Elli

2 months ago

I agree with Fredric, processing data only when there are no other means is in line with subsidiarity.

upvoted 0 times

...

Cassi

2 months ago

Gotta love these GDPR questions! I'm going with C - personal data can only be processed in accordance with the purpose specification.

upvoted 0 times

Tasia

5 days ago

I agree with you, C - personal data can only be processed in accordance with the purpose specification.

upvoted 0 times

...

Kaitlyn

6 days ago

I'm not sure, but I think it's B - personal data cannot be reused without explicit and informed consent.

upvoted 0 times

...

Lorriane

13 days ago

I disagree, I believe it's D - personal data must be adequate, relevant and not excessive in relation to the purposes.

upvoted 0 times

...

Winifred

1 months ago

I think it's A - personal data may only be processed when there are no other means to achieve the purposes.

upvoted 0 times

...

Fredric

2 months ago

I think option A is correct because it aligns with the principle of subsidiarity.

upvoted 0 times

...

Alaine

2 months ago

Hmm, I'm not so sure. D seems like the most logical answer, but I wouldn't be surprised if the exam tripped us up with a trick question.

upvoted 0 times

...

Emerson

2 months ago

Subsidiarity means processing data only when necessary.

upvoted 0 times

...

Fernanda

2 months ago

I'm pretty sure it's D. The GDPR requires personal data to be adequate, relevant, and not excessive in relation to the purposes for which it is processed.

upvoted 0 times

Eleonore

2 months ago

Yes, that's correct. It's important for organizations to ensure they only collect and process the data that is necessary for their specific purposes.

upvoted 0 times

...

Georgeanna

2 months ago

I think you're right. Subsidiarity in the context of GDPR means that personal data must be adequate, relevant, and not excessive in relation to the purposes.

upvoted 0 times

...

Corinne

2 months ago

I think the answer is A. The principle of subsidiarity means that personal data can only be processed when there are no other means to achieve the intended purpose.

upvoted 0 times

Dominque

2 months ago

Yes, it's all about ensuring that data processing is done in a way that respects privacy and limits unnecessary use.

upvoted 0 times

...

Shizue

2 months ago

That makes sense. It's important to only process personal data when absolutely necessary.

upvoted 0 times

...

Rodrigo

2 months ago

I agree with you, the answer is A. Subsidiarity in GDPR means personal data can only be processed when there are no other means.

upvoted 0 times

...