Certified Information Privacy Professional – Europe (CIPP/E) — Question 146

Which of the following does NOT have to be included in the records most processors must maintain in relation to their data processing activities?

Answer options

• A. Name and contact details of each controller on behalf of which the processor is acting.
• B. Categories of processing carried out on behalf of each controller for which the processor is acting.
• C. Details of transfers of personal data to a third country carried out on behalf of each controller for which the processor is acting.
• D. Details of any data protection impact assessment conducted in relation to any processing activities carried out by the processor on behalf of each controller for which the processor is acting.

Correct answer: D

Explanation

The correct answer is D because data protection impact assessments are not a mandatory requirement for the records processors must keep. Options A, B, and C are all necessary elements that processors are required to document to comply with data protection regulations.