Certified Information Privacy Professional CIPPE · Free Practice Question Easy
Question 7
According to the GDPR, the storage of a customer's phone number and email address in a company database is an example of:
-
A
Data Processing
-
B
DPIA
-
C
Privacy by default
-
D
Privacy by design
Reveal correct answer
Correct answer: A
Explanation
Data processing is anything done to personal data e.g. collection, recording or disclosure.
Data Protection by Design means that companies/organizations are encouraged to implement technical and organizational measures, at the earliest stages of the design of the processing operations, in such a way that safeguards privacy and data protection principles right from the start.
Privacy by default means that companies/organizations should ensure that personal data is processed with the highest privacy protection (for example only the data necessary should be processed, short storage period, limited accessibility) so that by default personal data isn’t made accessible to an indefinite number of persons (‘data protection by default’).
A DPIA is a process designed to help you systematically analyse, identify and minimise the data protection risks of a project or plan. Under Article 35 of the GDPR, where a type of processing, in particular, using new technologies, and taking into account the nature, scope, context and purposes of the processing, is likely to result in a high risk to the rights and freedoms of natural persons, the controller shall, prior to the processing, carry out an assessment of the impact of the envisaged processing operations on the protection of personal data
Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
