Free CIPP-E Exam braindumps download (CIPP-E exam dumps Free)

QUESTION: 116

There are three domains of security covered by Article 32 of the GDPR that apply to both the controller and the processor. These include all of the following EXCEPT?

Consent management and withdrawal.
Incident detection and response.
Preventative security.
Remedial security.

Answer(s): A

Reference:

https://gdpr-info.eu/art-32-gdpr/

Show Answer Next Question

QUESTION: 117

In the event of a data breach, which type of information are data controllers NOT required to provide to either the supervisory authorities or the data subjects?

The predicted consequences of the breach.
The measures being taken to address the breach.
The type of security safeguards used to protect the data.
The contact details of the appropriate data protection officer.

Answer(s): C

Reference:

https://gdpr-info.eu/art-34-gdpr/

Show Answer Next Question

QUESTION: 118

In which case would a controller who has undertaken a DPIA most likely need to consult with a supervisory authority?

Where the DPIA identifies that personal data needs to be transferred to other countries outside of the EE
Where the DPIA identifies high risks to individuals’ rights and freedoms that the controller can take steps to reduce.
Where the DPIA identifies that the processing being proposed collects the sensitive data of EU citizens.
Where the DPIA identifies risks that will require insurance for protecting its business interests.

Answer(s): B

Reference:

https://www.dataguidance.com/opinion/eu-how-when-and-why-carrying-out-dpia

Show Answer Next Question

QUESTION: 119

According to the GDPR, what is the main task of a Data Protection Officer (DPO)?

To create and maintain records of processing activities.
To conduct Privacy Impact Assessments on behalf of the controller or processor.
To monitor compliance with other local or European data protection provisions.
To create procedures for notification of personal data breaches to competent supervisory authorities.

Answer(s): C

Reference:

https://gdpr-info.eu/art-39-gdpr/

Show Answer Next Question

QUESTION: 120

In which of the following cases, cited as an example by a WP29 guidance, would conducting a single data protection impact assessment to address multiple processing operations be allowed?

A medical organization that wants to begin genetic testing to support earlier research for which they have performed a DPI
A data controller who plans to use a new technology product that has already undergone a DPIA by the product’s provider.
A marketing team that wants to collect mailing addresses of customers for whom they already have email addresses.
A railway operator who plans to evaluate the same video surveillance in all the train stations of his company.

Answer(s): D

Reference:

https://ec.europa.eu/justice/article-29/documentation/opinion-recommendation/files/2014/ wp217_en.pdf

Show Answer Next Question

Free CIPP-E Exam Braindumps Certified Information Privacy Professional/Europe (CIPP/E) Questions 116–120 (page: 25)

QUESTION: 116

Reference:

QUESTION: 117

Reference:

QUESTION: 118

Reference:

QUESTION: 119

Reference:

QUESTION: 120

Reference:

Free CIPP-E Exam Braindumps
Certified Information Privacy Professional/Europe (CIPP/E) Questions 116–120 (page: 25)