CIPP/E: Certified Information Privacy Professional/EuropeDemo

By IAPP · Question Mode

QuestionQ85

European Data Protection Law and Regulation

Where two controllers act as joint controllers under Article 26 of the GDPR, which of the following may those controllers not validly determine?

  • A The definition of a central contact point for data subjects.
  • B The rules regarding the exercising of data subjects' rights.
  • C The rules to provide information to data subjects in Articles 13 and 14.
  • D The non-disclosure of the essence of their arrangement to data subjects.
Explanation

Joint controllers may designate a contact point and transparently allocate responsibilities for data-subject rights and for providing the information required by Articles 13 and 14. However, Article 26(2) requires that the essence of their arrangement be made available to data subjects; an agreement to withhold it is invalid.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!