IAPP
CIPM · Question #228
Which of the following is TRUE about the Data Protection Impact Assessment (DPIA) process as required under the General Data Protection Regulation (GDPR)?
The correct answer is D. The DPIA is required if the processing activity entails risk to the rights and freedoms of an EU. See the full explanation below for the reasoning.
Question
Which of the following is TRUE about the Data Protection Impact Assessment (DPIA) process as required under the General Data Protection Regulation (GDPR)?
Options
- AThe DPIA result must be reported to the corresponding supervisory authority.
- BThe DPIA report must be published to demonstrate the transparency of the data processing.
- CThe DPIA must include a description of the proposed processing operation and its purpose.
- DThe DPIA is required if the processing activity entails risk to the rights and freedoms of an EU
How the community answered
(19 responses)- A5% (1)
- B5% (1)
- C11% (2)
- D79% (15)
Community Discussion
No community discussion yet for this question.