CIPP/E: Certified Information Privacy Professional/EuropeDemo

By IAPP · Question Mode

QuestionQ219

European Data Protection: Scope and Accountability

Assuming there is cross-border processing of personal data, which of the following criteria would not help the lead supervisory authority handling the Greek employee’s complaint determine the location of the controller’s main establishment?

  • A Where the controller is registered as a company.
  • B Where the processor is registered as a company.
  • C Where decisions about the processing activities are made.
  • D Where the director with responsibility for processing activities is located.
Explanation

A controller’s main establishment is determined by the location of its central administration or of the controller establishment that makes decisions about the purposes and means of the relevant processing and has authority to implement them. The processor’s company-registration location does not establish where the controller exercises those functions.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!