Pecb examstrust pecb Gdpr Online Access by Issa q24 vce pdf

Page: 4 / 5

Exam Name:	PECB Certified Data Protection Officer
Exam Code:	GDPR Dumps
Vendor:	PECB	Certification:	Privacy And Data Protection
Questions:	80 Q&A's	Shared By:	issa

Question 16

Question:

Which of the followingscenarios does NOT require conducting a DPIA?

Options:

When an organizationprocesses datato comply withlegal obligationsunder applicable Union law.

When ahospital collects and processes genetic and health dataof its patients.

When an organizationcollects public social media profilesfor ad personalization.

When an organizationinstalls AI-driven video analyticsto track employees’ work patterns.

Discussion

Question 17

Scenario3:

COR Bank is an international banking group that operates in 31 countries. It was formed as themerger of two well-known investment banks in Germany. Their two main fields of business are retail and investment banking. COR Bank provides innovative solutions for services such as payments, cash management, savings, protection insurance, and real-estate services. COR Bank has a large number of clients and transactions. Therefore, they process large information, including clients' personal data. Some of the data from the application processes of COR Bank, including archived data, is operated by Tibko, an IT services company located in Canada. To ensure compliance with the GDPR, COR Bank and Tibko have reached a data processing agreement Based on the agreement, the purpose and conditions of data processing are determined by COR Bank. However, Tibko is allowed to make technical decisions for storing the data based on its own expertise. COR Bank aims to remain a trustworthy bank and a long-term partner for its clients. Therefore, they devote special attention to legal compliance. They started the implementation process of a GDPR compliance program in 2018. The first step was to analyze the existing resources and procedures. Lisa was appointed as the data protection officer (DPO). Being the information security manager of COR Bank for many years, Lisa had knowledge of the organization's core activities. She was previously involved in most of the processes related to information systems management and data protection. Lisa played a key role in achieving compliance to the GDPR by advising the company regarding data protection obligations and creating a data protection strategy. After obtaining evidence of the existing data protection policy, Lisa proposed to adapt the policy to specific requirements of GDPR. Then, Lisa implemented the updates of the policy within COR Bank. To ensure consistency between processes of different departments within the organization, Lisa has constantly communicated with all heads of GDPR. Then, Lisa implemented the updates of the policy within COR Bank. To ensure consistency between processes of different departments within the organization, Lisa has constantly communicated with all heads of departments. As the DPO, she had access to several departments, including HR and Accounting Department. This assured the organization that there was a continuous cooperation between them. The activities of some departments within COR Bank are closely related to data protection. Therefore, considering their expertise, Lisa was advised from the top management to take orders from the heads of those departments when taking decisions related to their field. Based on this scenario, answer the following question:

Question:

Based on scenario 3,Lisa was advised to take orders from the heads of other departments. Is this acceptable under GDPR?

Options:

Yes, only heads of departments within a financial institution are allowed to give orders to the DPO.

Yes, the DPO shall take instructions and tasks from employee members if required by the organization.

No, the organization should not influence, nor put pressure on the DPO for any decision taken.

Yes, the DPO is responsible for following management directives while ensuring GDPR compliance.

Discussion

Nylah

I've been looking for good study material for my upcoming certification exam. Need help.

Dolly Aug 3, 2026

Then you should definitely give Cramkey Dumps a try. They have a huge database of questions and answers, making it easy to study and prepare for the exam. And the best part is, you can be sure the information is accurate and relevant.

Stefan

Thank you so much Cramkey I passed my exam today due to your highly up to date dumps.

Ocean Aug 6, 2026

Agree….Cramkey Dumps are constantly updated based on changes in the exams. They also have a team of experts who regularly review the materials to ensure their accuracy and relevance. This way, you can be sure you're studying the most up-to-date information available.

Everleigh

I must say that they are updated regularly to reflect the latest exam content, so you can be sure that you are getting the most accurate information. Plus, they are easy to use and understand, so even new students can benefit from them.

Huxley Aug 20, 2026

That's great to know. So, you think new students should buy these dumps?

Walter

Yayyy!!! I passed my exam with the help of Cramkey Dumps. Highly appreciated!!!!

Angus Aug 5, 2026

YES….. I saw the same questions in the exam.

Teddie

yes, I passed my exam with wonderful score, Accurate and valid dumps.

Isla-Rose Aug 13, 2026

Absolutely! The questions in the dumps were almost identical to the ones that appeared in the actual exam. I was able to answer almost all of them correctly.

Question 18

Question:

Which of the following options is theDPO’s responsibilitywhen processing personal datarelated to criminal convictionsis carried out by anofficial authority?

Options:

Determiningthe location where sensitive data may be processed.

Assessingthe necessity of knowing a data subject's identity.

Ensuringcompliance with any legal requirementsof Member States.

Approvingall security measures for processingthis data.

Discussion

Question 19

Scenario:

Ashop ownerdecided to install avideo surveillance systemto protect the property against theft. However, thecameras also capture a considerable part of the store next door.

Question:

Which statement below iscorrectin this case?

Options:

Controllers or processors that provide the means of processing personal data for such activities should operate undercommunity privacy requirements.

This provisiondoes not fall under GDPR requirementsas it does not pose a high threat to the rights and freedoms of data subjects.

Controllers or processors of personal data under this provisionfall under GDPR, since the cameras should capture only the premises of the shop owner who installed the cameras.

GDPR does not applyto personal data collected by surveillance camerasif used for security purposes.