CIPM: Certified Information Privacy ManagerDemo

By IAPP · Question Mode

QuestionQ88

Privacy Operational Lifecycle: Assess

Which statement is TRUE about the Data Protection Impact Assessment (DPIA) process required under the General Data Protection Regulation (GDPR)?

  • A The DPIA result must be reported to the corresponding supervisory authority.
  • B The DPIA report must be published to demonstrate the transparency of the data processing.
  • C The DPIA must include a description of the proposed processing operation and its purpose.
  • D The DPIA is required if the processing activity entails risk to the rights and freedoms of an EU individual.
Explanation

GDPR Article 35 requires a DPIA to include a systematic description of the planned processing operations and the purposes of that processing. A DPIA is triggered by processing likely to result in a high risk to natural persons’ rights and freedoms; it is not generally required for every risk, automatically reported to a supervisory authority, or published.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!