CIPM: Certified Information Privacy ManagerDemo

By IAPP · Question Mode

QuestionQ116

Privacy Operational Lifecycle: Respond

Which of the following details is NOT required from the data controller when meeting the GDPR “right to access” requirements?

  • A The data subject request process.
  • B The purpose of personal data processing.
  • C The name of the Data Protection Officer (DPO).
  • D The type of organizations with whom personal data was shared.
Explanation

GDPR Article 15 requires access information to cover the purposes of processing and the recipients or categories of recipients of the personal data. It does not require the access response to identify the Data Protection Officer by name. Where applicable, DPO contact details are instead transparency information required under Articles 13 and 14.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!