Regarding the Supervisory Authority's "Investigative Powers", it is correct to state:

Question

Options

• ATo order the controller and the processor, and, where applicable, the controller's or the
• Byou have the power to order the controller to report a personal data breach to the data subject
• Cit has the power to notify the controller or processor of alleged GDPR violations
• Dit has the power to conduct impact assessments on data privacy

• A
  2% (1)
• B
  2% (1)
• C
  88% (36)
• D
  7% (3)

Explanation

The numerous powers of the Supervisory Authority are divided into: Investigative powers; Correcting powers; Advisory and authorization powers. The investigative powers provided for in Article 58, Paragraph 1 are: processor's representative to provide any information it requires for the performance of its tasks; To carry out investigations in the form of data protection audits; To carry out a review on certifications issued pursuant to Article 42(7); To notify the controller or the processor of an alleged infringement of this Regulation; To obtain, from the controller and the processor, access to all personal data and to all information necessary for the performance of its tasks; To obtain access to any premises of the controller and the processor, including to any data processing equipment and means, in accordance with Union or Member State procedural law.

No community discussion yet for this question.