CIPM: Certified Information Privacy ManagerDemo

By IAPP · Question Mode

QuestionQ20

Privacy Program Framework

Which of the following information must a data controller provide to comply with GDPR “right to be informed” requirements?

  • A The purpose of personal data processing.
  • B The data subject’s right to withdraw consent.
  • C The contact details of the Data Protection Officer (DPO).
  • D The name of any organizations with whom personal data was shared.
Explanation

A controller must provide the purpose or purposes for which personal data will be processed as part of the GDPR transparency information. The withdrawal-of-consent information is conditional on consent being the lawful basis, DPO contact information is relevant only if a DPO has been appointed, and the recipient requirement may be met by providing categories of recipients rather than every organization’s name.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!