Exam CIPM Topic 2 Question 163 Discussion

Actual exam question for IAPP's CIPM exam
Question #: 163
Topic #: 2
Under the General Data Protection Regulation (GDPR), what must be included in a written agreement between the controller and processor in relation to processing conducted on the controller's behalf?

Suggested Answer: D Vote an answer

Under the GDPR, a written agreement between the controller and processor in relation to processing conducted on the controller's behalf must include an obligation on the processor to assist the controller in complying with the controller's obligations to notify the supervisory authority about personal data breaches.
This is one of the requirements under Article 28(3)(f) of the GDPR, which specifies the minimum content of such an agreement. The other options are not required by the GDPR, although they may be agreed upon by the parties as additional terms. References: GDPR, Article 28(3)(f).

by Naomi at May 04, 2026, 04:26 AM

Limited Time Offer

15%

Off

Get Premium CIPM Questions as Interactive Self Test Engine or PDF

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
0
0
0
10