Privacy and Data Protection Foundation: PDPF

Correct Answer: D

Article 22 provides for this type of damage to the data subject and legislates on "Automated individual decisions, including profiling":

1. The data subject shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her.

Correct Answer: D

An offense to privacy, as any illegal processing of personal data is considered an offense.

Correct Answer: C

By applying the concept of least privilege to the personal data collected, stored or otherwise processed. Incorrect. Data minimization does not address least privilege.

By limiting access rights to staff who need the personal data for the intended processing operations. Incorrect. This describes the concept of limiting authorization for instance to comply with the principle of integrity and confidentiality.

By limiting file sizes, through saving all personal data that is processed in the smallest possible format. Incorrect. Data minimization according to the GDPR is not about storage size, but about minimalizing the use of personal data.

By limiting the personal data to what is adequate, relevant and necessary for the processing purposes. Correct. This is the essence of the description in the GDPR. (Literature: A, Chapter 2; GDPR Article 5(1) (c))