EUGDPRBreach NotificationEASYFree question

A ransomware attack that encrypts personal data and the organization has no backup constitutes:

A.Only an IT security incident, not a GDPR breach
B.A breach only if ransom is paid
C.Only a criminal matter
D.An availability breach (and potentially a confidentiality breach if data was also exfiltrated)

Why D is correct

Ransomware causing loss of data availability is a personal data breach. If data was also exfiltrated, it's also a confidentiality breach.

Know someone studying for GDPR? Send them this one.

GDPR and EU are trademarks or registered trademarks of their respective owners. CyberCertPrep is an independent exam-preparation resource and is not affiliated with, authorized by, sponsored by, or endorsed by EU or any other certification body. All study material is independently created; the certification name is used only to identify the exam this resource helps you prepare for.

A ransomware attack that encrypts personal data and the organization has no backup constitutes:

Where this fits in the GDPR exam

One question down. Thousands to go.

A ransomware attack that encrypts personal data and the organization has no backup constitutes:

Where this fits in the GDPR exam

More free Breach Notification questions

One question down. Thousands to go.