Under the General Data Protection Regulation (GDPR), What Must Be

question 25

Multiple Choice

Under the General Data Protection Regulation (GDPR) , what must be included in a written agreement between the controller and processor in relation to processing conducted on the controller's behalf?

• A) An obligation on the processor to report any personal data breach to the controller within 72 hours.
• B) An obligation on both parties to report any serious personal data breach to the supervisory authority.
• C) An obligation on both parties to agree to a termination of the agreement if the other party is responsible for a personal data breach.
• D) An obligation on the processor to assist the controller in complying with the controller's obligations to notify the supervisory authority about personal data breaches.

---

Definitions:

Public Policy Tort

A legal wrong that violates established public policy, allowing victims to seek damages in court.

Employment-At-Will

A doctrine followed by most jurisdictions in the United States that says an employer can dismiss an employee at any time for any reason.

Wrongful Discharge

The unjust termination of an employee's contract, typically in violation of legal or contractual terms.

Title VII

Refers to a portion of the Civil Rights Act of 1964 prohibiting employment discrimination based on race, color, religion, sex, and national origin.