CIPP/E: Certified Information Privacy Professional/EuropeDemo

By IAPP · Question Mode

QuestionQ112

Compliance with European Data Protection Law and Regulation

When a company collects personal data in a European Union (EU) member state from a source other than the data subjects themselves, what must it do?

  • A Inform the subjects about the collection
  • B Provide a public notice regarding the data
  • C Upgrade security to match that of the source
  • D Update the data within a reasonable timeframe
Explanation

Under GDPR Article 14, where personal data were not obtained from the data subject, the controller must provide the required information to that data subject, subject to the Article’s limited exceptions. This transparency obligation includes information about the processing and the source of the data.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!