CIPP-E · Question #60
The GDPR specifies fines that may be levied against data controllers for certain infringements. Which of the following infringements would be subject to the less severe administrative fine of up to…
The correct answer is B. Failure to implement technical and organizational measures to ensure data protection is. According to Article 83 of the GDPR, the less severe administrative fines of up to 10 million euros or 2% of the annual worldwide turnover apply to infringements of the articles governing controllers and processors, certification bodies, and monitoring bodies. These include…
Question
The GDPR specifies fines that may be levied against data controllers for certain infringements. Which of the following infringements would be subject to the less severe administrative fine of up to 10 million euros (or in the case of an undertaking, up to 2% of the total worldwide annual turnover of the preceding financial year)?
Options
- AFailure to demonstrate that consent was given by the data subject to the processing of their
- BFailure to implement technical and organizational measures to ensure data protection is
- CFailure to process personal information in a manner compatible with its original purpose.
- DFailure to provide the means for a data subject to rectify inaccuracies in personal data.
How the community answered
(39 responses)- A3% (1)
- B79% (31)
- C10% (4)
- D8% (3)
Explanation
According to Article 83 of the GDPR, the less severe administrative fines of up to 10 million euros or 2% of the annual worldwide turnover apply to infringements of the articles governing controllers and processors, certification bodies, and monitoring bodies. These include Articles 8, 11, 25-39, 42, and 43. Among the answer choices, only option B falls under this category, as Article 25 requires controllers to implement data protection by design and by default.
Topics
Community Discussion
No community discussion yet for this question.