CIPP-E Supervisory Practice Questions

In which case would a controller who has undertaken a DPIA most likely need to consult with a supervisory authority?

• AA. Where the DPIA identifies that personal data needs to be transferred to other countries outside of the EEA.
• BB. Where the DPIA identifies high risks to individuals’ rights and freedoms that the controller can take steps to reduce.
• CC. Where the DPIA identifies that the processing being proposed collects the sensitive data of EU citizens.
• DD. Where the DPIA identifies risks that will require insurance for protecting its business interests.

Which area of privacy is a lead supervisory authority’s (LSA) MAIN concern?

• AA. Data subject rights
• BB. Data access disputes
• CC. Cross-border processing
• DD. Special categories of data