IAPP
CIPM · Question #285
Under the European Data Protection Board, which Processing operation would require a Data Protection Impact Assessment (DPIA)?
The correct answer is C. A hospital processing patient's generic and health data in its hospital information system. See the full explanation below for the reasoning.
Question
Under the European Data Protection Board, which Processing operation would require a Data Protection Impact Assessment (DPIA)?
Options
- AAn online newspaper using its subscriber list to email a daily newsletter.
- BA healthcare clinic that processes personal data of its patients in its billing system.
- CA hospital processing patient's generic and health data in its hospital information system.
- DAn online store displaying advertisements based on items viewed or purchased on its own
How the community answered
(45 responses)- A13% (6)
- B2% (1)
- C78% (35)
- D7% (3)
Community Discussion
No community discussion yet for this question.