A company is located in a country NOT considered by the European Union (EU) to have an adequate level of data protection. Which of the following is an obligation of the company if it imports personal data from another organization in the European Economic Area (EEA) under standard contractual clauses?
A. Submit the contract to its own government authority.
B. Ensure that notice is given to and consent is obtained from data subjects.
C. Supply any information requested by a data protection authority (DPA) within 30 days.
D. Ensure that local laws do not impede the company from meeting its contractual obligations.
A company is located in a country NOT considered by the European Union (EU) to have an adequate level of data protection
-
answerhappygod
- Site Admin
- Posts: 899604
- Joined: Mon Aug 02, 2021 8:13 am
A company is located in a country NOT considered by the European Union (EU) to have an adequate level of data protection
Join a community of subject matter experts. Register for FREE to view solutions, replies, and use search function. Request answer by replying!