Examice

Exam CIPP-E All QuestionsBrowse all questions from this exam

Question 125

According to the European Data Protection Board, controllers responding to a data subject access request can refuse to provide a copy of personal data under certain conditions. Which of the following is NOT one of these conditions?

If the data subject access request was sent to an employee that is not involved in the processing of such requests.

If there is such a large amount of data that the controller cannot identify the data subject of the request.

If the controller is unable to use end-to-end encrypted emails for responding to such requests.

If the personal data was processed in the past but is no longer at the controller’s disposal at the time of the request.

Correct Answer: A

According to data protection regulations, controllers cannot refuse to provide a copy of personal data simply because the request was sent to an employee not involved in processing such requests. It is the responsibility of the organization to ensure requests are directed to the appropriate department. Other conditions listed refer to legitimate reasons like inability to identify the data subject due to the volume of data, technological limitations in securely responding to requests, and the data no longer being available.

Discussion

ARAWADOption: A

Shouldn't it be A?