Which term in the GDPR is defined here?

“The controller shall implement appropriate technical and organizational measures for ensuring that (…) only personal data which are necessary for each specific purpose of the processing are processed.”

Which term in the GDPR is defined here?
A . Compliance
B . Data protection by default and by design
C . Embedded data protection

View Answer

Answer: B

Explanation:

Compliance. Incorrect. Compliance means meeting rules or standards.

Data protection by design and by default. Correct. By default, the minimum of personal data is to be processed for the shortest possible period, using the best possible security measures to prevent unauthorized access. Data protection by design refers to processing that includes appropriate measures to implement data protection principles. (Literature: A, Chapter 8; GDPR Article 25)

Embedded data protect. Incorrect. Embedded data protection is the result of data protection by design.