Certified Information Privacy Manager (CIPM) — Question 153

In the European Union, the GDPR gives Supervisory Authorities the right to which of the following actions?

Answer options

• A. Suspend data transfers undertaken by a controller to a third country.
• B. Prevent a national data protection bill from becoming law.
• C. Prosecute a controller in a criminal investigation.
• D. Award punitive damages to a data subject.

Correct answer: A

Explanation

The correct answer is A, as the GDPR allows Supervisory Authorities to suspend data transfers if they believe that the receiving country does not ensure adequate data protection. Options B, C, and D are incorrect because Supervisory Authorities do not have the power to influence national legislation, prosecute criminal cases, or award damages directly.