nerdexam
EXIN

PDPF · Question #51

Which of these options is an example of a data breach?

The correct answer is B. Loss of personal data. Here is a catch between the options "Loss of personal data" and "Transfer of personal data outside A data breach is whenever something happens that has not been planned with the personal data, be it improper processing, improper sharing, loss of data, deletion, etc. That is…

Data protection breaches

Question

Which of these options is an example of a data breach?

Options

  • ATransfer of personal data outside the EU
  • BLoss of personal data
  • CA security incident related to corporate data.

How the community answered

(43 responses)
  • A
    5% (2)
  • B
    93% (40)
  • C
    2% (1)

Explanation

Here is a catch between the options "Loss of personal data" and "Transfer of personal data outside A data breach is whenever something happens that has not been planned with the personal data, be it improper processing, improper sharing, loss of data, deletion, etc. That is, personal data must be used for a specific purpose, respecting the life cycle (from collection to exclusion), any situation that escapes this cycle must be reported as a data breach. The transfer of personal data outside the EU can also be considered a violation if there is no authorization from the data subject and if the destination country does not offer legislation like the GDPR. Although there is no specific legislation, the Supervisory Authority can authorize the transfer of data provided that the company in the destination country accepts standard contractual clauses for the processing of this data. Article 46 of GDPR 1. In the absence of a decision pursuant to Article 45(3), a controller or processor may transfer personal data to a third country or an international organisation only if the controller or processor has provided appropriate safeguards, and on condition that enforceable data subject rights and effective legal remedies for data subjects are available. Article 58 of GDPR 3. Each supervisory authority shall have all of the following authorisation and advisory powers: to authorise contractual clauses referred to in point (a) of Article 46(3).

Topics

#data breach#personal data loss#security incident#definitions

Community Discussion

No community discussion yet for this question.

Full PDPF Practice