Certified Information Privacy Professional – Europe (CIPP/E) — Question 173

According to the GDPR, what is the main task of a Data Protection Officer (DPO)?

Answer options

• A. To create and maintain records of processing activities.
• B. To conduct Privacy Impact Assessments on behalf of the controller or processor.
• C. To monitor compliance with other local or European data protection provisions.
• D. To create procedures for notification of personal data breaches to competent supervisory authorities.

Correct answer: C

Explanation

The correct answer is C because the DPO's main role involves ensuring that the organization complies with data protection laws and regulations. While the other options describe important tasks, they are not the primary responsibility of the DPO according to the GDPR.