CIPP-E Question #107: Real Exam Question with Answer & Explanation

The correct answer is B. To conduct Privacy Impact Assessments on behalf of the controller or processor.. According to Article 35 of the GDPR, the controller must carry out a data protection impact assessment (DPIA) prior to processing that is likely to result in a high risk to the rights and freedoms of natural persons. The DPIA is a process for assessing and mitigating the potentia

Question

According to the GDPR, what is the main task of a Data Protection Officer (DPO)?

Options

ATo create and maintain records of processing activities.
BTo conduct Privacy Impact Assessments on behalf of the controller or processor.
CTo monitor compliance with other local or European data protection provisions.
DTo create procedures for notification of personal data breaches to competent supervisory

Explanation

According to Article 35 of the GDPR, the controller must carry out a data protection impact assessment (DPIA) prior to processing that is likely to result in a high risk to the rights and freedoms of natural persons. The DPIA is a process for assessing and mitigating the potential impact of the processing on the protection of personal data. The controller must seek the advice of the DPO, where designated, when carrying out a DPIA. The DPO can assist the controller in conducting the DPIA and ensuring its compliance with the GDPR requirements. The DPO can also monitor the performance of the DPIA and act as a contact point for the supervisory authority and the data subjects.

Community Discussion

No community discussion yet for this question.

Full CIPP-E Practice