CIPP/E: Certified Information Privacy Professional/EuropeDemo

By IAPP · Question Mode

QuestionQ181

European Data Protection: Scope and Accountability

When does the European Data Protection Board (EDPB) advise reassessing whether a transfer tool is effectively providing a level of personal-data protection that complies with the European Union (EU) level?

  • A After a personal data breach.
  • B Every three (3) years.
  • C On an ongoing basis.
  • D Every year.
Explanation

The EDPB requires exporters to re-evaluate, at appropriate intervals, whether the transfer tool continues to provide an EU-equivalent level of protection, particularly when relevant developments occur in the third country. This is an ongoing obligation, not a fixed yearly or three-year review cycle.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!