Accountability

Question 1

DPIA stands for …

Answer 1

Data Protection Impact Assessment

Question 2

DPIAs are also referred to as …

Answer 2

Privacy Impact Assessments

Question 3

When is a DPIA required?

Answer 3

When processing is likely to entail a high risk to the rights and freedoms of natural persons

Question 4

When must a supervisory authority be contacted with regards to a DPIA?

Answer 4

Prior to processing when the DPIA indicates a high risk to data subjects that are not mitigated.

Question 5

DPO stands for

Answer 5

Data Protection Officer

Question 6

DPOs are required under what circumstances?

Answer 6

Any of these:

(1) Controller is a public authority
(2) Core activities include regular and systematic monitoring on a large scale
(3) Core activities consist of large-scale processing of special categories of data

Question 7

True or False: Recording obligations apply to both controllers and processors

Answer 7

True

Question 8

What the main values of the DPIA?

Answer 8

• Incorporate data protection considerations into org planning
• Demonstrating compliance to supervisory authorities