Which of the following would require designating a data protection officer?
A.
Processing is carried out by an organization employing 250 persons or more.
B.
Processing is carried out for the purpose of providing for-profit goods or services to individuals in the EU.
C.
The core activities of the controller or processor consist of processing operations of financial information or information relating to children.
D.
The core activities of the controller or processor consist of processing operations that require systematic monitoring of data subjects on a large scale.
D.The core activities of the controller or processor consist of processing operations that require systematic monitoring of data subjects on a large scale.
GDPR Article Reference:
Article 37(1): The designation of a data protection officer by the controller and the processor shall be mandatory in the following cases:
(b) the core activities of the controller or the processor consist of processing operations which, by virtue of their nature, their scope and/or their purposes, require regular and systematic monitoring of data subjects on a large scale;
(c) the core activities of the controller or the processor consist of processing on a large scale of special categories of data pursuant to Article 9 and personal data relating to criminal convictions and offences referred to in Article 10.
upvoted 1 times
...
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Ssourav
4 months ago