Exam CIPP-E topic 1 question 34 discussion

Verify that the identity of the customer can be proven by other means.

C is the only right answer when taking Article 13 into consideration: Paragraphs 1, 2 and 3 shall not apply where and insofar as the data subject already has the information.

The merger outcome has not been finalized yet

Since the question asks for 'According to Article 13 of the GDPR,' need to answer the question within the context of Article 13. The company should consider whether they can respond to the customer's request under Article 13(1)(c) and (e) of the GDPR. This article requires data controllers to inform data subjects about the recipients or categories of recipients of their personal data. In the case of an ongoing merger, if the specific recipients of the data have not yet been determined, the company should still acknowledge the request and provide any available information. They should inform the customer that the details are not yet finalized but will be communicated once they are.

D. Verify that the identity of the customer can be proven by other means. GDPR Article Reference: Article 12(6): Where the controller has reasonable doubts concerning the identity of the natural person making the request, the controller may request the provision of additional information necessary to confirm the identity of the data subject. This is to ensure that personal data is not disclosed to an unauthorized individual, protecting the privacy and security of the data subject.

The Answer is C - Art. 13 GDPR/4: Paragraphs 1, 2 and 3 shall not apply where and insofar as the data subject already has the information.

Answer is C Art.14 4. Paragraphs 1, 2 and 3 shall not apply where and insofar as the data subject already has the information.

Before providing the customer with the requested information, the company must first verify that the purpose of the request is in line with the GDPR. This means that the company must ensure that it has a lawful basis for processing the customer's personal data, such as obtaining the customer's consent or having a legitimate interest.