A Spanish electricity customer calls her local supplier with questions about the company’s upcoming merger. Specifically, the customer wants to know the recipients to whom her personal data will be disclosed once the merger is final. According to Article 13 of the GDPR, what must the company do before providing the customer with the requested information?
According to Article 13 of the GDPR, before providing the customer with information about who their personal data will be disclosed to after the merger, the company must verify that the identity of the customer can be proven. This ensures that personal data is only disclosed to the correct individual and not to someone impersonating the customer.
Verify that the identity of the customer can be proven by other means.
that would reference to Art. 15 not 13
Before providing the customer with the requested information, the company must first verify that the purpose of the request is in line with the GDPR. This means that the company must ensure that it has a lawful basis for processing the customer's personal data, such as obtaining the customer's consent or having a legitimate interest.
Answer B is speaking about the purpose of the customers request, not the purpose of the processing.
Answer is C Art.14 4. Paragraphs 1, 2 and 3 shall not apply where and insofar as the data subject already has the information.
The Answer is C - Art. 13 GDPR/4: Paragraphs 1, 2 and 3 shall not apply where and insofar as the data subject already has the information.