PDPF · Question #108
Who should ask for an opinion after conducting an impact assessment on the protection of personal data (DPIA)?
The correct answer is A. DPO. The controller is responsible for performing the DPIA. However, after executing it, it is necessary to have the opinion of the DPO - in charge of Data Protection, so that it can give its opinion, favorable or not for the continuity of processing. Article 35 of GDPR 2. The…
Question
Who should ask for an opinion after conducting an impact assessment on the protection of personal data (DPIA)?
Options
- ADPO
- BController
- CSupervisory Authority
- DProcessor
How the community answered
(18 responses)- A94% (17)
- D6% (1)
Explanation
The controller is responsible for performing the DPIA. However, after executing it, it is necessary to have the opinion of the DPO - in charge of Data Protection, so that it can give its opinion, favorable or not for the continuity of processing. Article 35 of GDPR 2. The controller shall seek the advice of the data protection officer, where designated, when carrying out a data protection impact assessment.
Topics
Community Discussion
No community discussion yet for this question.