GDPR Practice Question: A data processing agreement must include: | CyberCertPrep
EUGDPRController ProcessorEASYFree question
A data processing agreement must include:
A.Only the price of processing services
B.Only the data security measures
C.Only the names of the parties
D.The subject matter, duration, nature, and purpose of processing, type of data, and categories of data subjects
Why D is correct
Article 28(3) specifies the mandatory contents of a processing agreement, including subject matter, duration, nature and purpose, data types, and categories of data subjects.
Know someone studying for GDPR? Send them this one.
Where this fits in the GDPR exam
Controller Processor
Covers controller processor concepts and practices within GDPR.
This question belongs to the "Controller & Processor Obligations" domain, which makes up about 20% of the GDPR exam.
CyberCertPrep gives you 20 free GDPR questions per day with this same answer-and-explanation depth, plus timed exam simulations and progress tracking. No card required.
GDPR and EU are trademarks or registered trademarks of their respective owners. CyberCertPrep is an independent exam-preparation resource and is not affiliated with, authorized by, sponsored by, or endorsed by EU or any other certification body. All study material is independently created; the certification name is used only to identify the exam this resource helps you prepare for.
What is the primary purpose of a Data Protection Impact Assessment (DPIA)?