GDPR Exam Dumps : PECB Certified Data Protection Officer

UnderArticle 35(3)(b) of GDPR, aDPIA is required for large-scale processing of sensitive data, includingmedical research on vulnerable individuals.

Option A is correctbecausemedical data and research involving vulnerable individuals require a DPIA.

Option B is incorrectbecauseencryption does not eliminate the need for a DPIA if the processing poses high risks.

Option C is incorrectbecausea general risk assessment does not replace a DPIAunderArticle 35.

Option D is incorrectbecauseretention period is not a deciding factor for DPIA necessity.

References:

GDPR Article 35(3)(b)(DPIA for special category data)

Recital 91(Risks to fundamental rights require DPIAs)

UnderArticle 2 of GDPR, the regulation applieswhenever personal data is processed by automated means, includingCCTV footage that captures identifiable individuals.

Option C is correctbecauseGDPR applies when surveillance cameras capture public or third-party areas beyond the shop owner’s premises.

Option A is incorrectbecausecommunity privacy requirements do not override GDPR.

Option B is incorrectbecauseGDPR applies even if the risk is low, as long aspersonal data (images of identifiable individuals) is processed.

Option D is incorrectbecauseGDPR applies to security cameras unless used solely for personal or household purposes(Recital 18).

References:

GDPR Article 2(1)(Material scope includes video surveillance)

Recital 18(Household exemption does not apply to public monitoring)

UnderArticle 70 of GDPR, theEDPB is responsible for ensuring consistency in GDPR application and advising the European Commissionon data protection matters.

Option B is correctbecausethe EDPB provides opinions and guidelines on GDPR implementation.

Option A is incorrectbecausesupervision and enforcement are the responsibility of national supervisory authorities, not the EDPB.

Option C is incorrectbecauseEU laws are adopted by the European Parliament and Council, not the EDPB.

Option D is incorrectbecausethe EDPB does not conduct audits; national data protection authorities do.

References:

GDPR Article 70(1)(b)(EDPB’s advisory role)

Recital 139(EDPB ensures consistency in GDPR application)