EUGDPRBreach NotificationEASYFree question

Regardless of whether notification is required, the controller must:

A.Document any personal data breach, including facts, effects, and remedial actions taken
B.Do nothing if the breach is minor
C.Only document breaches that are reported in the media
D.Only document breaches involving special category data

Why A is correct

Article 33(5) requires the controller to document any personal data breach, enabling the supervisory authority to verify compliance with GDPR.

Know someone studying for GDPR? Send them this one.

GDPR and EU are trademarks or registered trademarks of their respective owners. CyberCertPrep is an independent exam-preparation resource and is not affiliated with, authorized by, sponsored by, or endorsed by EU or any other certification body. All study material is independently created; the certification name is used only to identify the exam this resource helps you prepare for.

Regardless of whether notification is required, the controller must:

Where this fits in the GDPR exam

One question down. Thousands to go.

Regardless of whether notification is required, the controller must:

Where this fits in the GDPR exam

More free Breach Notification questions

One question down. Thousands to go.