Question on GDPR - can someone explain me this.

A breach exposes encrypted personal data. The encryption keys are stored securely and were not compromised.

Under GDPR, what is the most accurate interpretation regarding breach notification to the supervisory authority?

A. Notification is always required, regardless of encryption

B. Notification is not required because the data is encrypted

C. Notification is required only if there is a high risk to rights and freedoms

D. Notification is required only if the data subjects complain

8 comments

skool.com/cybersecurity-study-group

Share resources, get advice, and connect with peers studying cybersecurity. Join our CISSP study group and connect with fellow professionals today!

Leaderboard (30-day)

+41

+30

+30

+26

+22