What is the definition of Supervisory Authority according to the GDPR?
Correct : B
Article 4 dealing with the GDPR Definitions says in its paragraph 21:
'supervisory authority' means an independent public authority which is established by a Member State pursuant to Article 51.
Start a Discussions
Who is responsible for demonstrating the compliance of personal data processing with the General Data Protection Regulation (GDPR)?
Correct : C
The front line with the data holder is the Controller, see image. So, it is he who has to show compliance, who must be concerned with the legality of processing, who must implement security measures.
Start a Discussions
To comply with the General Data Protection Regulation (GDPR) it is necessary to create a procedure for reporting data breaches to the Supervisory Authority.
As the controller is a public administration agency, which option is a requirement for this procedure?
Correct : C
It is not necessary to inform the Supervisory Authority of any violation that occurs. But every violation must be analyzed with caution and attention. It is not necessary to notify the Supervisory Authority only if it does not present risks to the data subjects.
The DPO must always be involved to guide the best strategy and action for each violation that occurs. Article 38 legislates on the position of the data protection officer:
1. The controller and the processor shall ensure that the data protection officer is involved, properly and in a timely manner, in all issues which relate to the protection of personal data.
It is clear that the DPO -- Data Protection Officer, must be involved in the entire data processing life cycle. From its collection to its exclusion.
Start a Discussions
A person who works for a union took home a draft newsletter to finish it. The thumb drive containing the draft and contact list has been lost. To whom, among others, this data breach should be reported?
Correct : A
This is sensitive data, so the loss must be reported to both the responsible authority and the data subjects.
Start a Discussions
Which of the following has a data breach under the General Data Protection Regulation (GDPR)?
Correct : B
Start a Discussions