Exin Exam PDPF Topic 7 Question 68 Discussion

Actual exam question for Exin's PDPF exam

Question #: 68
Topic #: 7

Which of these should appear in a Data Protection Impact Assessment (DPIA) according to the General Data Protection Regulation (GDPR)?

AAn assessment of the need and proportionality of treatment operations in relation to the objectives.

BData Protection Officer (DPO) contact and responsibilities.

CAn inventory and the flow of personal data within the organization.

DA survey of other laws that must be taken into account in addition to the GDPR.

Show Suggested Answer

Suggested Answer: A

In its Article 35 the GDPR legislates on the Impact assessment on data protection.

7) The assessment shall contain at least:

a) a systematic description of the envisaged processing operations and the purposes of the processing, including, where applicable, the legitimate interest pursued by the controller;

b) an assessment of the necessity and proportionality of the processing operations in relation to the purposes;

c) an assessment of the risks to the rights and freedoms of data subjects referred to in paragraph 1; and

d) the measures envisaged to address the risks, including safeguards, security measures and mechanisms to ensure the protection of personal data and to demonstrate compliance with this Regulation taking into account the rights and legitimate interests of data subjects and other persons concerned.

by Gearldine at Aug 28, 2024, 10:15 AM

Limited Time Offer

25%

Off

Get Premium PDPF Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Ashlee

1 months ago

I'm feeling option A for this one. Gotta make sure the data processing is justified and proportional - can't be going overboard with personal data, that's for sure!

upvoted 0 times

...

Alesia

1 months ago

Honestly, I'm just hoping I don't have to do a DPIA anytime soon. Sounds like a real headache, am I right? But hey, at least it's not as bad as doing my taxes.

upvoted 0 times

...

1 months ago

Option B seems like a bit of a trick question. The DPO's contact and responsibilities should be mentioned, but it's not the main focus of a DPIA.

upvoted 0 times

Arletta

10 days ago

C) An inventory and the flow of personal data within the organization.

upvoted 0 times

...

Arletta

18 days ago

A) An assessment of the need and proportionality of treatment operations in relation to the objectives.

upvoted 0 times

...

Domonique

2 months ago

I agree with Adolph, option A is crucial for ensuring compliance with GDPR requirements.

upvoted 0 times

...

Adolph

2 months ago

I think option A should appear in a DPIA because it's important to assess the need and proportionality of data processing.

upvoted 0 times

...

2 months ago

A) An assessment of the need and proportionality of treatment operations in relation to the objectives.

upvoted 0 times

...