MS-900 Exam QuestionsBrowse all questions from this exam

MS-900 Exam - Question 29


You need to consider the underlined segment to establish whether it is accurate.

To retrieve data for employees who request personal data under General Data Protection Regulation (GDPR) guidelines, you have to create a GDPR assessment.

Select `No adjustment required` if the underlined segment is accurate. If the underlined segment is inaccurate, select the accurate option.

What should you do?

Show Answer
Correct Answer: D

To retrieve data for employees who request personal data under General Data Protection Regulation (GDPR) guidelines, a 'data subject request case' should be created. This process involves managing and responding to requests from individuals who wish to access, rectify, or delete their own personal data. Creating a GDPR assessment would typically involve evaluating how well an organization complies with GDPR requirements, but it is not the correct procedure for handling individual personal data requests.

Discussion

10 comments
Sign in to comment
yogur83Option: D
Dec 8, 2022

Copied form Microsoft Learn: What is a Data Subject Request? Regulations provide people with rights to help manage the personal data that organizations or employers collect from them. These regulations often refer to people as data subjects or consumers, and the organizations or employers with that data as data controllers, or controllers. The GDPR provides these rights to data subject within the territorial reach of the GDPR. In the United States, the CCPA provides these rights to California consumers.

syu31svc
Jul 1, 2022

D is correct as per link provided

kilo365
Jan 28, 2024

D. data subject request case The accurate option is "data subject request case" as per the General Data Protection Regulation (GDPR) guidelines, when an employee requests for their personal data, a data subject request case should be created to retrieve the data. A GDPR assessment is not a requirement to retrieve data for employees who request personal data under GDPR guidelines.

werbinich
Aug 11, 2022

A GDPR Assessment is a check against your business processes to see if you hold your personal data according to the requirements set out by the GDPR. It is not a certification, nor proof that you comply with GDPR. Thus is not the correct answer

harp1610
Jul 12, 2022

not much explanation is given properly for these question :( simply one link for the topic in general no reason as to why the option are relevant or not

werbinich
Aug 11, 2022

Answer is correct Personal data and data subject: Any information relating to an identified or identifiable natural person (<<<data subject>>>); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.

covid_9
Sep 21, 2023

Answer is D

UzziTheOneOption: D
Jul 26, 2024

The answer is D.

Du_MS900
Oct 20, 2024

A opção correta é: D. Caso de solicitação do titular dos dados A criação de um "caso de solicitação do titular dos dados" é uma prática comum para lidar com solicitações de acesso a dados pessoais de acordo com as diretrizes do Regulamento Geral de Proteção de Dados (GDPR). Este processo envolve a avaliação e resposta a solicitações de indivíduos que desejam acessar, retificar ou excluir seus próprios dados pessoais. Portanto, a opção D é a mais precisa para esse cenário. As opções B e C não estão diretamente relacionadas à gestão de solicitações de dados pessoais no contexto do GDPR.

ThispersonsaidOption: D
Apr 15, 2025

Again, this is not part of the current MS900 learning path. It again assumes you would know this if you're an IT expert. If it's not in the learning path, i would not be able to answer this since i am in the marketing department.