Câu 21: DPO: PECB GDPR - Certified Data Protection Officer

Scenario 6: Bus Spot is one of the largest bus operators in Spain. The company operates in local transport and bus rental since 2009. The success of Bus Spot can be attributed to the digitization of the bus ticketing system, through which clients can easily book tickets and stay up to date on any changes to their arrival or departure time. In recent years, due to the large number of passengers transported daily, Bus Spot has dealt with different incidents including vandalism, assaults on staff, and fraudulent injury claims. Considering the severity of these incidents, the need for having strong security measures had become crucial. Last month, the company decided to install a CCTV system across its network of buses. This security measure was taken to monitor the behavior of the company's employees and passengers, enabling crime prevention and ensuring safety and security. Following this decision, Bus Spot initiated a data protection impact assessment (DPIA). The outcome of each step of the DRIA was documented as follows: Based on this scenario, answer the following question:What step of the DPIA methodology did Bus Spot miss when conducting the DPIA?

1. A. The necessity and proportionality evaluation step, where it should have determined the lawful basis for data processing — đáp án hiện tại
2. B. The step describing the data processing activities, where it should have detailed the scope, nature, context, and purposes of the processing
3. C. The alignment with GDPR-defined DPIA guidelines, where it should have adhered to the regulatory framework and methodology outlined by the GDPR