Which of the following information must be provided by the data controller when complying with the General Data Protection Regulation (GDPR) “right to access” requirements?
A.
The purpose of personal data processing.
B.
The data subject’s right to withdraw consent.
C.
The contact details of the Data Protection Officer (DPO).
D.
The type of organizations with whom personal data was shared.
In relation to the right of access, surely contact details would be correct. This allows the data subject to make contact with the DPO to request access to personal data held about them by the data controller
The right of access gives individuals the legal right to a copy of their personal data and any other supplementary data. It’s designed to help people understand why and how the company is using their data, and to ensure it’s being used lawfully.
https://www.gdpreu.org/the-regulation/list-of-data-rights/right-of-access/
The General Data Protection Regulation (GDPR), under Article 15, gives individuals the right to request a copy of any of their personal data which are being ‘processed’ (i.e. used in any way) by ‘controllers’ (i.e. those who decide how and why data are processed), as well as other relevant information (as detailed below). These requests are often referred to as ‘data subject access requests’, or ‘access requests’.
)
Any recipient(s) of the personal data to whom the personal data has or will be disclosed, in particular recipients in third countries or international organisations and information about appropriate safeguards.
A. The purpose of personal data processing.
Under the GDPR “right to access”, data subjects have the right to obtain confirmation from the data controller as to whether or not personal data concerning them is being processed.
De acordo com o Artigo 15 do GDPR, o titular dos dados tem o direito de obter do controlador a confirmação de que os dados pessoais estão sendo processados e, quando for esse o caso, acesso aos dados pessoais e informações como a finalidade do processamento, as categorias de dados pessoais envolvidos, os destinatários ou categorias de destinatários para quem os dados foram ou serão divulgados, e o período previsto para o armazenamento dos dados pessoais.
upvoted 2 times
...
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Rocketly
4 months, 3 weeks agoDPRamone
8 months, 3 weeks agoCock
1 year, 1 month agoSsourav
1 year, 2 months agoSheeraLuna1
1 year, 2 months agoemily0922
1 year, 3 months agoszopenowa
1 year, 5 months agomgmferreira
1 year, 5 months ago