nerdexam
EXIN

PDPF · Question #92

The General Data Protection Regulation (GDPR) in its Article 30 legislates on the Records of treatment activities. If requested, the controller must provide these records:

The correct answer is C. The supervisory authority. Article 30 in its first paragraph legislates: 1. Each controller and, where applicable, the controller's representative, shall maintain a record of processing activities under its responsibility. Recital 82 mentions: In order to demonstrate compliance with this Regulation, the…

Supervisory authorities and enforcement

Question

The General Data Protection Regulation (GDPR) in its Article 30 legislates on the Records of treatment activities. If requested, the controller must provide these records:

Options

  • ATo the data processor
  • BTo the Data Protection Officer (DPO)
  • CThe supervisory authority
  • DTo the European Commission

How the community answered

(26 responses)
  • A
    4% (1)
  • C
    92% (24)
  • D
    4% (1)

Explanation

Article 30 in its first paragraph legislates: 1. Each controller and, where applicable, the controller's representative, shall maintain a record of processing activities under its responsibility. Recital 82 mentions: In order to demonstrate compliance with this Regulation, the controller or processor should maintain records of processing activities under its responsibility. Each controller and processor should be obliged to cooperate with the supervisory authority and make those records, on request, available to it, so that it might serve for monitoring those processing operations.

Topics

#records of processing activities#Article 30#supervisory authority#controller obligations

Community Discussion

No community discussion yet for this question.

Full PDPF Practice