Exin PDPF Exam - Topic 7 Question 80 Discussion

Actual exam question for Exin's PDPF exam

Question #: 80
Topic #: 7

[All PDPF Questions]

A person finds that a private videotape showing her in a very intimate situation has been published on a website. She never consented to publication and demands that the video is being removed without undue delay.

According to the GDPR, what should be done next?

ANothing. The video may be regarded as 'news' and, therefore, the website is only exercising its right to freedom of expression and information.

BThe controller erases the video from the website and, when possible, informs any controller who might
process the same video, that it must be erased.

CThe controller erases the video from the website. There is no obligation however, to inform others who might have copied it, that it should be erased.

DThe controller directs the person to seek a lawyer and informs that he cannot exclude before a juridical authorization.

Show Suggested Answer

Suggested Answer: C

Controller: Correct. The controller determines the purpose and means of the processing. (Literature: A, Chapter 1; GDPR Article 4(7))

Processor: Incorrect. The controller determines the purpose of the processing, the processor works on the controller's instructions.

Supervisory authority: Incorrect. The supervisory authority monitors and enforces compliance with the GDPR requirements.

Third party: Incorrect. A third party has no role in determining the purpose of the processing. Any party that determines the purpose would become a new controller.

by Cheryl at Feb 10, 2025, 01:42 PM

Limited Time Offer

25%

Off

Get Premium PDPF Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Chantay

3 months ago

Actually, the website might argue freedom of expression here.

upvoted 0 times

...

Sang

3 months ago

I’m surprised this is even a question, it seems obvious!

upvoted 0 times

...

Gregg

4 months ago

But isn’t it considered newsworthy?

upvoted 0 times

...

Leota

4 months ago

Totally agree, that’s a clear violation of privacy.

upvoted 0 times

...

Oretha

4 months ago

The video should be removed immediately, no consent!

upvoted 0 times

...

Bettina

4 months ago

I feel like option C could be misleading. If the video is removed, shouldn't they also inform others who might have it? That seems important for privacy protection.

upvoted 0 times

...

Hyman

4 months ago

I'm a bit uncertain about option A. It seems like freedom of expression could apply, but I thought personal privacy would take precedence in this case?

upvoted 0 times

...

Maurine

5 months ago

I remember a similar question where the focus was on consent and privacy rights. I feel like the controller has to act quickly, which makes me lean towards B as well.

upvoted 0 times

...

Vanna

5 months ago

I think the GDPR emphasizes the right to erasure, so maybe option B is correct? But I'm not entirely sure about the specifics.

upvoted 0 times

...

Kristian

5 months ago

I've reviewed the GDPR section on this type of situation before. I think I know the right approach, but I'll double-check my notes just to be sure.

upvoted 0 times

...

Dannette

5 months ago

Okay, let's think this through step-by-step. The key is to focus on the individual's rights and the controller's obligations under the GDPR.

upvoted 0 times

...

Mickie

5 months ago

Hmm, I'm a bit unsure about this one. The GDPR can be tricky, and I want to make sure I don't miss any important details.

upvoted 0 times

...

Emilio

5 months ago

This seems like a straightforward GDPR question. I'm pretty confident I can apply the key principles here.

upvoted 0 times

...

Ty

9 months ago

Option A? Are you kidding me? Letting a non-consensual intimate video stay up because it's 'news'? Someone's been watching too much 'Black Mirror'.

upvoted 0 times

...

Sarah

9 months ago

Option D? Really? Sending the person to a lawyer and waiting for a court order? Talk about bureaucracy gone wild. Just take the video down, it's the right thing to do!

upvoted 0 times

...

Rodrigo

10 months ago

I'm going with option C. Why should the controller have to track down and inform every other controller? That seems like a lot of work, and they already erased the video, so that's good enough.

upvoted 0 times

Valentine

8 months ago

C: Yeah, I agree. It's better to be thorough and make sure the video is completely removed.

upvoted 0 times

...

Rebbecca

8 months ago

A: I see your point. Maybe it's better to go with option B then, just to be safe.

upvoted 0 times

...

Vanna

8 months ago

B: But what if someone else still has a copy of the video? Shouldn't they be told to erase it too?

upvoted 0 times

...

Billye

8 months ago

A: I think option C is the best choice. The controller already erased the video, so they shouldn't have to inform others.

upvoted 0 times

...

Katlyn

10 months ago

I don't know, option A seems reasonable to me. The website has a right to freedom of expression, right? What do I know, I'm just a candidate.

upvoted 0 times

Octavio

9 months ago

C) The controller erases the video from the website. There is no obligation to inform others who might have copied it, that it should be erased.

upvoted 0 times

...

Na

9 months ago

I think option B is more appropriate. The controller should erase the video and inform others who might process it to do the same.

upvoted 0 times

...

Arleen

9 months ago

A) Nothing. The video may be regarded as 'news' and, therefore, the website is only exercising its right to freedom of expression and information.

upvoted 0 times

...

Paul

10 months ago

Option B is clearly the correct answer. The GDPR requires the controller to erase the video and inform any other controllers who might have it. Anything less is unacceptable.

upvoted 0 times

...