PECB GDPR Exam With Confidence Using Practice Dumps

UnderArticle 30 of GDPR, controllers and processorsmust maintain a record of processing activities (ROPA). Whenever changes occurin the way personal data is processed(such as a transfer to cloud storage), theDPO must ensure these changes are recorded in the processing register.

Option B is correctbecause theDPO must ensure the data processing register is updated to reflect the new storage method.

Option A is incorrectbecausestorage changes do not require new consent unless the purpose of processing has changed.

Option C is incorrectbecause whileassessing security measures is important, it is not theprimary dutyrelated to the data processing register.

Option D is incorrectbecausenot all processing changes require notifying the supervisory authorityunless they introduce high riskswithout proper safeguards.

References:

GDPR Article 30(1)(g)(Controllers must maintain updated processing records)

Recital 82(Controllers should document changes in processing activities)

UnderArticle 11(1) of GDPR, controllersare not required to process additional datafor the sole purpose of identifying data subjectsif such identification is not needed for processing.

Option C is correctbecausePinky does not store identifiable purchase data, so it is not required to create additional records.

Option A and B are incorrectbecauseGDPR does not obligate controllers to process additional data if identification is unnecessary.

Option D is incorrectbecausePinky cannot require additional information when it does not have a basis to process identity-linked data.

References:

GDPR Article 11(1)(Controllers are not required to process extra data for identification)

Recital 57(Data controllers should avoid collecting unnecessary identity data)

UnderArticle 70 of GDPR, theEDPB is responsible for ensuring consistency in GDPR application and advising the European Commissionon data protection matters.

Option B is correctbecausethe EDPB provides opinions and guidelines on GDPR implementation.

Option A is incorrectbecausesupervision and enforcement are the responsibility of national supervisory authorities, not the EDPB.

Option C is incorrectbecauseEU laws are adopted by the European Parliament and Council, not the EDPB.

Option D is incorrectbecausethe EDPB does not conduct audits; national data protection authorities do.

References:

GDPR Article 70(1)(b)(EDPB’s advisory role)

Recital 139(EDPB ensures consistency in GDPR application)