Seminar 16 - Obligations of processors and controllers

Question 1

Why do we have controllers, processors and joint processors?

Answer 1

The concepts of controller, joint controller and processor are functional concepts in that they aim to allocate responsibilities according to the actual roles of the parties

Question 2

Name the 3 anonymisation techniques?

Answer 2

 Singling out: possibility to isolate some or all records which identify an individual in the dataset
 Linkability: ability to link, at least, two records concerning the same data subject or a group of data subjects (either in the same database or in two different databases)
 Inference: possibility to deduce, with significant probability, the value of an attribute from the values of a set of other attributes

Question 3

With personal data breaches when must the Controller must notify the SA?

Answer 3

 without undue delay, and no later than 72 hours after becoming aware,
 unless the breach is unlikely to result in a risk to the rights and freedoms of the individuals

Question 4

With personal data breaches when must the Controller must notify the DS?

Answer 4

Without undue delay