A company plans to transfer employee health information between two of its entities in France. To maintain the security of the processing, what would be the most important security measure to apply…

Question

Options

• AInform the data subject of the security measures in place.
• BEnsure that the receiving entity has signed a data processing agreement.
• CEncrypt the transferred data in transit and at rest.
• DConduct a data protection impact assessment.

• A
  3% (1)
• B
  17% (5)
• C
  73% (22)
• D
  7% (2)

Explanation

According to Article 32 of the GDPR, the controller and the processor shall implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including the pseudonymisation and encryption of personal data. Encryption is a key security measure to protect the confidentiality, integrity and availability of personal data, especially when it is transferred between different entities or locations. Encryption ensures that only authorised parties can access and modify the data, and prevents unauthorised or unlawful access, disclosure, alteration or destruction. Encryption also reduces the risk of data breaches and the potential harm to the data subjects. Therefore, encrypting the transferred data in transit and at rest would be the most important security measure to apply to the health data transmission.

No community discussion yet for this question.