QuestionQ71

HUAWEI CLOUD Stack Security Service Instruction

Map the following GDPR application scopes to their corresponding business scenarios.

Drag & Drop
Company A is headquartered in Germany and needs to transfer some personal data to its subsidiary in Argentina.
Company B is headquartered in France and needs to transfer an equipment procurement list to its subsidiary in South Korea.
User C in Italy purchases products online in euros on an e-commerce platform outside European Union.
Company D is headquartered in Malaysia and needs to transfer some personal data to its subsidiary in Spain.
Applicable to GDPR
Not applicable to GDPR
Explanation

GDPR applies to processing of personal data in the context of an EU establishment even when data is transferred abroad, and it covers a non-EU organization that offers goods or services to people in the EU. Thus the transfers involving the German company and Spanish subsidiary, and the Italian consumer purchase, are covered. An equipment procurement list is not established as personal data, so GDPR’s material scope is not met.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!