Exin Exam PDPF Topic 3 Question 65 Discussion

Actual exam question for Exin's PDPF exam

Question #: 65
Topic #: 3

A natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal dat

a. Which role in data protection is defined here?

AThird party

BProcessor

CController

DSupervisory authority

Show Suggested Answer

Suggested Answer: C

Controller: Correct. The controller determines the purpose and means of the processing. (Literature: A, Chapter 1; GDPR Article 4(7))

Processor: Incorrect. The controller determines the purpose of the processing, the processor works on the controller's instructions.

Supervisory authority: Incorrect. The supervisory authority monitors and enforces compliance with the GDPR requirements.

Third party: Incorrect. A third party has no role in determining the purpose of the processing. Any party that determines the purpose would become a new controller.

by Michal at Jul 06, 2024, 07:02 AM

Limited Time Offer

25%

5 months ago

The description sounds like a Controller to me. They determine the purpose and means of processing personal data.

upvoted 0 times

Geraldo

4 months ago

That's correct. The Controller is responsible for ensuring compliance with data protection regulations.

upvoted 0 times

...

Aretha

4 months ago

So, the answer would be C) Controller.

upvoted 0 times

...

Ayesha

4 months ago

Yes, I agree. Controllers determine the purposes and means of processing personal data.

upvoted 0 times

...

Janine

5 months ago

I think the role defined here is a Controller.

upvoted 0 times

...

Sena

5 months ago

C) Controller

upvoted 0 times

...