CIPP/E: Certified Information Privacy Professional/EuropeDemo

By IAPP · Question Mode

QuestionQ287

Compliance with European Data Protection Law and Regulation

Why does the privacy notice supplied by CreditPlaya breach Article 13 of the GDPR?

  • A The document is delivered after the personal data has been obtained.
  • B The document is separated from the document listing Terms and Conditions.
  • C The document is not written in the language of the average prospective customer.
  • D The document fails to mention the applicable security measures for the processing.
Explanation

When a controller obtains personal data directly from the data subject, Article 13(1) GDPR requires the required information to be provided at the time the data are obtained. Sending the privacy notice only afterward in an eligibility email does not meet that timing requirement.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!