CIPP/E: Certified Information Privacy Professional/EuropeDemo

By IAPP · Question Mode

QuestionQ285

European Data Protection Law and Regulation

The data-transfer mechanism Alice drafted violates the GDPR because the company did not first obtain approval from whom?

  • A The Court of Justice of the European Union.
  • B The European Data Protection Board.
  • C The Data Protection Authority.
  • D The European Commission.
Explanation

Under GDPR Article 47(1), binding corporate rules for international data transfers require approval by the competent supervisory authority, i.e., the relevant Data Protection Authority. The approval occurs under the GDPR consistency mechanism.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!