A secretary at a pediatric cardiology clinic instead of sending the doctor the list of patients scheduled for the day, sends it to all those responsible registered for the children with scheduled…

Question

Options

• AThe Supervisory Authority must be notified, but there is no need to notify those responsible for
• BThe Supervisory Authority must be notified and also those responsible for the holders who had
• CThere is no need to notify the Supervisory Authority, however those responsible for the holders
• DThere is no need to notify the Supervisory Authority or those responsible for the data subjects, as

• A
  20% (7)
• B
  63% (22)
• C
  6% (2)
• D
  11% (4)

Explanation

This is an issue that addresses two very important points - sensitive data and data from minors. As these are, it is necessary to inform the Supervisory Authority and those responsible for the data subjects. Article 34 mentions: 1. When the personal data breach is likely to result in a high risk to the rights and freedoms of natural persons, the controller shall communicate the personal data breach to the data subject without Recital 38 says: Children merit specific protection regarding their personal data, as they may be less aware of the risks, consequences and safeguards concerned and their rights in relation to the processing of personal data. Such specific protection should, in particular, apply to the use of personal data of children for the purposes of marketing or creating personality or user profiles and the collection of personal data with regard to children when using services offered directly to a child. The consent of the holder of parental responsibility should not be necessary in the context of preventive or counselling services offered directly to a child.

No community discussion yet for this question.