Exin Exam PDPF Topic 7 Question 68 Discussion

Actual exam question for Exin's PDPF exam

Question #: 68
Topic #: 7

Which of these should appear in a Data Protection Impact Assessment (DPIA) according to the General Data Protection Regulation (GDPR)?

AAn assessment of the need and proportionality of treatment operations in relation to the objectives.

BData Protection Officer (DPO) contact and responsibilities.

CAn inventory and the flow of personal data within the organization.

DA survey of other laws that must be taken into account in addition to the GDPR.

Show Suggested Answer

Suggested Answer: A

In its Article 35 the GDPR legislates on the Impact assessment on data protection.

7) The assessment shall contain at least:

a) a systematic description of the envisaged processing operations and the purposes of the processing, including, where applicable, the legitimate interest pursued by the controller;

b) an assessment of the necessity and proportionality of the processing operations in relation to the purposes;

c) an assessment of the risks to the rights and freedoms of data subjects referred to in paragraph 1; and

d) the measures envisaged to address the risks, including safeguards, security measures and mechanisms to ensure the protection of personal data and to demonstrate compliance with this Regulation taking into account the rights and legitimate interests of data subjects and other persons concerned.

by Gearldine at Aug 28, 2024, 10:15 AM

Limited Time Offer

25%

Off

Get Premium PDPF Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Ashlee

2 months ago

I'm feeling option A for this one. Gotta make sure the data processing is justified and proportional - can't be going overboard with personal data, that's for sure!

upvoted 0 times

...

Alesia

2 months ago

Honestly, I'm just hoping I don't have to do a DPIA anytime soon. Sounds like a real headache, am I right? But hey, at least it's not as bad as doing my taxes.

upvoted 0 times

...

Rasheeda

2 months ago

Hmm, D is an interesting one. I guess it's good to consider other relevant laws, but the GDPR should be the main focus of the DPIA. Gotta keep it laser-focused, you know?

upvoted 0 times

Shaunna

24 days ago

Definitely, considering other laws is important, but the GDPR should always take precedence in our data protection assessments.

upvoted 0 times

...

Reid

25 days ago

D is important too, but it should definitely not overshadow the importance of complying with the GDPR in the DPIA.

upvoted 0 times

...

Micah

26 days ago

Absolutely, keeping it laser-focused on the GDPR ensures we are meeting the highest standards for data protection.

upvoted 0 times

...

Casie

1 months ago

Yeah, I agree. The GDPR is the main law we need to comply with, so it should definitely be the main focus of the DPIA.

upvoted 0 times

...

Lezlie

1 months ago

D) A survey of other laws that must be taken into account in addition to the GDPR.

upvoted 0 times

...

Pearlie

1 months ago

C) An inventory and the flow of personal data within the organization.

upvoted 0 times

...

Thersa

2 months ago

B) Data Protection Officer (DPO) contact and responsibilities.

upvoted 0 times

...

Stephane

2 months ago

A) An assessment of the need and proportionality of treatment operations in relation to the objectives.

upvoted 0 times

...

Sherrell

2 months ago

I think both options A and C are important for a comprehensive DPIA to address data protection risks effectively.

upvoted 0 times

...

Huey

3 months ago

I believe option C should also be included in a DPIA as understanding the flow of personal data is essential for data protection.

upvoted 0 times

...

Brice

3 months ago

I'm going with C - an inventory of personal data flows is definitely a key part of the DPIA process. Can't protect what you can't identify, am I right?

upvoted 0 times

...