To comply with the General Data Protection Regulation (GDPR) it is necessary to create a procedure for reporting data breaches to the Supervisory Authority. As the controller is a public…

Question

Options

• AIt must contain a step to perform a Data Protection Impact Analysis (DPIA).
• BIt must include an audit step.
• CIt should include a step to consult the Data Protection Officer (DPO) in order to determine whether
• DIt must contain a step to notify the data subject.

• A
  14% (2)
• B
  7% (1)
• C
  79% (11)

Explanation

It is not necessary to inform the Supervisory Authority of any violation that occurs. But every violation must be analyzed with caution and attention. It is not necessary to notify the Supervisory Authority only if it does not present risks to the data subjects. The DPO must always be involved to guide the best strategy and action for each violation that occurs. Article 38 legislates on the position of the data protection officer: 1. The controller and the processor shall ensure that the data protection officer is involved, properly and in a timely manner, in all issues which relate to the protection of personal data. It is clear that the DPO - Data Protection Officer, must be involved in the entire data processing life cycle. From its collection to its exclusion.

No community discussion yet for this question.