GDPR Monitoring & Reporting Tools 2

Question 1

Which GDPR article specifically requires controllers to implement appropriate technical and organizational measures to ensure processing security, which monitoring tools must support?

Accepted Answer

Article 32

Answer

Article 32 mandates appropriate technical and organizational security measures, which monitoring tools must help enforce and document.

Question 2

A DPO uses a compliance dashboard showing a 'data map.' What is the primary GDPR purpose of maintaining such a data map?

Accepted Answer

To support Records of Processing Activities under Article 30

Answer

Data maps underpin the Records of Processing Activities (RoPA) required by GDPR Article 30, documenting all processing operations.

Question 3

When a monitoring tool logs access to personal data, which GDPR principle does this practice most directly support?

Accepted Answer

Accountability

Answer

Access logging demonstrates accountability by creating evidence that the controller can use to show compliance with GDPR obligations.

Question 4

A SIEM system alerts on anomalous bulk exports of personal data. Under GDPR, the controller must assess whether this constitutes a personal data breach within how many hours of becoming aware?

Accepted Answer

72 hours

Answer

Article 33 requires notification to the supervisory authority within 72 hours of becoming aware of a personal data breach.

Question 5

Which metric is LEAST useful in a GDPR compliance monitoring dashboard for assessing data subject rights fulfillment?

Accepted Answer

Number of server CPU cycles used per request

Answer

CPU cycles are an infrastructure metric with no direct bearing on GDPR data subject rights compliance obligations.

(GDPR) Certified General Data Protection Regulation Specialist Practice Test

(GDPR) Certified General Data Protection Regulation Specialist Practice Test

GDPR Monitoring & Reporting Tools 2