nerdexam
EXIN

PDPF · Question #2

A processor is instructed to report on customers who bought a product both last month and at least once in the three months before that. Unfortunately, the processor makes a mistake and uses…

The correct answer is B. The processor must notify the controller of a data breach. The controller must assess the possible. You've hit your limit · resets 5am (America/New_York)

Data protection breaches

Question

A processor is instructed to report on customers who bought a product both last month and at least once in the three months before that. Unfortunately, the processor makes a mistake and uses personal data collected by another controller for a different purpose. The mistake is found before the report is created, and nobody has access to personal date he or she should not have had access to. How should the processor act on this situation and what should the controller do, if anything?

Options

  • AThe processor must notify the controller and the controller must notify the Data Protection
  • BThe processor must notify the controller of a data breach. The controller must assess the possible
  • CThe processor must notify the Data Protection Authority of a data breach. The controller must
  • DThe processor must restart processing using the right data. There is no need for the controller to

How the community answered

(45 responses)
  • A
    22% (10)
  • B
    64% (29)
  • C
    9% (4)
  • D
    4% (2)

Explanation

You've hit your limit · resets 5am (America/New_York)

Topics

#data breach notification#processor obligations#controller duties#incident response

Community Discussion

No community discussion yet for this question.

Full PDPF Practice