QuestionQ9
Compliance with European Data Protection Law and RegulationAn unexpected power outage leaves company Z unable to access customer data for six hours. Under Article 32 of the GDPR, this is considered a breach. Based on the WP 29 guidance from February 2018, what should company Z do?
- A Notify affected individuals that their data was unavailable for a period of time.
- B Document the loss of availability to demonstrate accountability
- C Notify the supervisory authority about the loss of availability
- D Conduct a thorough audit of all security systems
Community Discussion