nerdexam
IAPP

CIPM · Question #108

The General Data Protection Regulation (GDPR) specifies fines that may be levied against data controllers for certain infringements. Which of the following will be subject to administrative fines of…

The correct answer is B. Failure to implement technical and organizational measures to ensure data protection is. See the full explanation below for the reasoning.

Question

The General Data Protection Regulation (GDPR) specifies fines that may be levied against data controllers for certain infringements. Which of the following will be subject to administrative fines of up to 10 000 000 EUR, or in the case of an undertaking, up to 2% of the total worldwide annual turnover of the preceding financial year?

Options

  • AFailure to demonstrate that consent was given by the data subject to the processing of their
  • BFailure to implement technical and organizational measures to ensure data protection is
  • CFailure to process personal information in a manner compatible with its original purpose
  • DFailure to provide the means for a data subject to rectify inaccuracies in personal data

How the community answered

(18 responses)
  • A
    6% (1)
  • B
    72% (13)
  • C
    6% (1)
  • D
    17% (3)

Community Discussion

No community discussion yet for this question.

Full CIPM Practice