CIPM: Certified Information Privacy ManagerDemo

Question

Which of the following circumstances will definitely require a Data Protection Impact Assessment (DPIA)?

A When a company acquires a new business entity.
B When Human Resources engages a new employee benefit provider.
C When a new system is deployed to track an individual’s location or behavior.
D When a new application is developed to track data subject access requests.

Explanation

Tracking an individual’s location or behaviour is high-risk personal-data processing because it can enable intrusive monitoring and materially affect privacy. DPIA guidance identifies location and behavioural tracking as processing that requires assessment for high-risk impacts before deployment.

Learn more

When do we need to do a DPIA? | ICO

CIPM: Certified Information Privacy ManagerDemo

AstroTutor

Notes

Readiness

QuestionQ14

Community Discussion