"The controller shall implement appropriate technical and organizational measures for ensuring that (...) only personal data which are necessary for each specific purpose of the processing are…

The correct answer is B. Data protection by default and by design. Compliance. Incorrect. Compliance means meeting rules or standards. Data protection by design and by default. Correct. By default, the minimum of personal data is to be processed for the shortest possible period, using the best possible security measures to prevent unauthorized…

Privacy by Design and by Default

Question

“The controller shall implement appropriate technical and organizational measures for ensuring that (…) only personal data which are necessary for each specific purpose of the processing are processed.” Which term in the GDPR is defined here?

Options

ACompliance
BData protection by default and by design
CEmbedded data protection

How the community answered

(27 responses)

A
4% (1)
B
89% (24)
C
7% (2)

Explanation

Compliance. Incorrect. Compliance means meeting rules or standards. Data protection by design and by default. Correct. By default, the minimum of personal data is to be processed for the shortest possible period, using the best possible security measures to prevent unauthorized access. Data protection by design refers to processing that includes appropriate measures to implement data protection principles. (Literature: A, Chapter 8; GDPR Article 25) Embedded data protect. Incorrect. Embedded data protection is the result of data protection by

Topics

#privacy by design#data protection by default#data minimization#GDPR Article 25

Community Discussion

No community discussion yet for this question.

Full PDPF Practice