PECB GDPR Exam With Confidence Using Practice Dumps

UnderArticle 70 of GDPR, theEDPB is responsible for ensuring consistency in GDPR application and advising the European Commissionon data protection matters.

Option B is correctbecausethe EDPB provides opinions and guidelines on GDPR implementation.

Option A is incorrectbecausesupervision and enforcement are the responsibility of national supervisory authorities, not the EDPB.

Option C is incorrectbecauseEU laws are adopted by the European Parliament and Council, not the EDPB.

Option D is incorrectbecausethe EDPB does not conduct audits; national data protection authorities do.

References:

GDPR Article 70(1)(b)(EDPB’s advisory role)

Recital 139(EDPB ensures consistency in GDPR application)

UnderArticle 34(3)(a) of GDPR, if personal datais encrypted or otherwise protected, notification to data subjectsis not requiredunless the risk is high.

Option C is correctbecauseencryption renders the data unintelligible to unauthorized parties, reducing risk.

Option A is incorrectbecausenot all breaches require data subject notification—only those posing high risks.

Option B is incorrectbecausethe number of affected individuals does not determine notification requirements.

Option D is incorrectbecausenotification is based on risk assessment, not supervisory authority requests alone.

References:

GDPR Article 34(3)(a)(No notification required if encryption makes data inaccessible)

Recital 86(Notification is necessary only if data loss poses a significant risk)

UnderArticle 82(2) of GDPR,processors can be held liablefor data breachesif they act outside or against the controller’s instructions. Processors mustcomply with the controller’s directivesor be held accountable.

Option B is correctbecauseprocessors are liable if they fail to follow the controller’s instructions.

Option A is incorrectbecauseprocessors do not take instructions directly from data subjects.

Option C is incorrectbecauseDPOs do not issue legally binding instructions to processors.

Option D is incorrectbecauseprocessors share liability under GDPR.

References:

GDPR Article 82(2)(Processor liability for non-compliance)

Recital 146(Joint liability between controllers and processors)