Exin Exam PDPF Topic 8 Question 69 Discussion

Actual exam question for Exin's PDPF exam

Question #: 69
Topic #: 8

What is the purpose of a data protection audit by the supervisory authority?

ATo monitor and enforce the application of the GDPR by assessing that processing is performed in compliance with the GDPR.

BTo fulfill the obligation in the GDPR to implement appropriate technical and organizational measures for data protection.

CTo advise the controller on the mitigation of privacy risks to protect the controller from liability claims for
non-compliance.

Show Suggested Answer

Suggested Answer: A

To advise the controller on the mitigation of privacy risks to protect the controller from liability claims for non-compliance. Incorrect. The supervisory authority has the task to monitor compliance and to advise on enhancements, but its purpose is not to protect the controller.

To fulfill the obligation in the GDPR to implement appropriate technical and organizational measures for data protection. Incorrect. The audit is not the implementation of the measures, but an assessment of the effectiveness of them.

To monitor and enforce the application of the GDPR by assessing that processing is performed in compliance with the GDPR. Correct. According to the GDPR this is an important task of a supervisory authority. (Literature: A, Chapter 7; GDPR Article 57 (1)(a))

by Suzan at Sep 06, 2024, 01:30 PM

Limited Time Offer

25%

Off

Get Premium PDPF Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Ryan

2 months ago

I believe it's also about advising on privacy risks to protect from liability claims.

upvoted 0 times

...

Jeannine

2 months ago

Option B is just too broad. The audit is specifically about assessing compliance, not general data protection measures.

upvoted 0 times

...

3 months ago

Option A seems to be the most comprehensive answer here. A data protection audit by the supervisory authority is all about monitoring and enforcing GDPR compliance.

upvoted 0 times

Lauran

2 months ago

I agree, it's important for the supervisory authority to monitor and enforce GDPR regulations.

upvoted 0 times

...

Felicidad

3 months ago

Yes, option A is correct. The purpose of a data protection audit is to ensure compliance with GDPR.

upvoted 0 times

...

Stefania

3 months ago

I think the purpose is to monitor and enforce GDPR compliance.

upvoted 0 times

...