CIPP-E Question #106: Real Exam Question with Answer & Explanation

The correct answer is B. Where the DPIA identifies high risks to individuals' rights and freedoms that the controller can. According to the Free CIPP/E Study Guide, page 14, "if the DPIA indicates that the processing would result in a high risk in the absence of measures taken by the controller to mitigate the risk, the controller shall consult the supervisory authority prior to the processing." This

Question

In which case would a controller who has undertaken a DPIA most likely need to consult with a supervisory authority?

Options

AWhere the DPIA identifies that personal data needs to be transferred to other countries outside of
BWhere the DPIA identifies high risks to individuals' rights and freedoms that the controller can
CWhere the DPIA identifies that the processing being proposed collects the sensitive data of EU
DWhere the DPIA identifies risks that will require insurance for protecting its business interests.

Explanation

According to the Free CIPP/E Study Guide, page 14, "if the DPIA indicates that the processing would result in a high risk in the absence of measures taken by the controller to mitigate the risk, the controller shall consult the supervisory authority prior to the processing." This means that the controller must seek the advice of the supervisory authority when the DPIA identifies high risks that cannot be sufficiently reduced by the controller's own measures.

Community Discussion

No community discussion yet for this question.

Full CIPP-E Practice