Exam CIPP-E topic 1 question 107 discussion

Actual exam question from IAPP's CIPP-E

Question #: 107
Topic #: 1

The GDPR requires controllers to supply data subjects with detailed information about the processing of their data. Where a controller obtains data directly from data subjects, which of the following items of information does NOT legally have to be supplied?

A. The recipients or categories of recipients.
B. The categories of personal data concerned.
C. The rights of access, erasure, restriction, and portability.
D. The right to lodge a complaint with a supervisory authority.

Show Suggested Answer

Suggested Answer: B 🗳️

by mlgrjc at March 25, 2023, 2 p.m.

Comments

Submit Cancel

Egofskam

Highly Voted 1 year, 10 months ago

B is correct. Not A, see 13(1)(e); Not C, see 13(2)(b); not D, see 13.(2)(d).

upvoted 5 times

...

Ssourav

Most Recent 11 months ago

Selected Answer: B

Relevant Legislation: GDPR Article 13: Information to be provided where personal data are collected from the data subject. This includes the identity and contact details of the controller, the purposes of the processing, the legal basis for the processing, the recipients or categories of recipients of the personal data, the data subjects' rights, and the right to lodge a complaint with a supervisory authority, among other information. Therefore, the correct answer is B.

upvoted 1 times

...