QuestionQ16

European Data Protection Law and Regulation

Under the GDPR, when personal data have not been obtained directly from the data subject, when is a controller exempt from directly giving the data subject information about the processing?

  • A The data subject already has information regarding how his data will be used
  • B The provision of such information to the data subject would be too problematic
  • C Third-party data would be disclosed by providing such information to the data subject
  • D The processing of the data subject’s data is protected by appropriate technical measures
Explanation

GDPR Article 14(5)(a) exempts a controller from the information obligation where the data subject already has the required processing information.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!