IAPP Exam CIPM Topic 4 Question 64 Discussion

Actual exam question for IAPP's CIPM exam

Question #: 64
Topic #: 4

Under the GDPR. when the applicable lawful basis for the processing of personal data is a legal obligation with which the controller must comply. which right can the data subject exercise?

ARight to withdraw consent.

BRight to data portability.

CRight to restriction.

DRight to erasure.

Show Suggested Answer

Suggested Answer: C

Under the GDPR, when the applicable lawful basis for the processing of personal data is a legal obligation with which the controller must comply, the data subject can exercise the right to restriction. This means that the data subject can request the controller to limit the processing of their personal data in certain circumstances, such as when they contest the accuracy or lawfulness of the processing. The other rights are not applicable in this case, as they are either dependent on consent (right to withdraw consent and right to data portability) or subject to exceptions (right to erasure).Reference:GDPR, Articles 6(1), 18, 21(1).

by Daniela at Jul 04, 2024, 10:25 AM

Limited Time Offer

25%

Off

Get Premium CIPM Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Javier

4 months ago

I see your point, Ivette, but I still think it's C) Right to restriction because the controller must comply with a legal obligation.

upvoted 0 times

...

Polly

4 months ago

A) Right to withdraw consent. Ha! Good one, but that's not relevant when the basis is a legal requirement, not consent.

upvoted 0 times

Joaquin

3 months ago

C) Right to restriction. That's right, the data subject can exercise the right to restriction in this situation.

upvoted 0 times

...

Daryl

4 months ago

A) Right to withdraw consent. That's correct, it wouldn't apply in this case.

upvoted 0 times

...

Lamonica

4 months ago

I'm not sure, but I think it might be B) Right to data portability.

upvoted 0 times

...

Pamela

4 months ago

D) Right to erasure. Hmm, not quite. That's for when the processing is based on consent or legitimate interests, not legal obligations.

upvoted 0 times

...

Dante

4 months ago

B) Right to data portability? Really? That wouldn't make sense here. The GDPR is all about protecting data, not making it portable.

upvoted 0 times

...

Lino

4 months ago

C) Right to restriction. That's the correct answer, as the GDPR grants the data subject the right to restrict processing when the legal basis is a legal obligation.

upvoted 0 times