Certified Information Privacy Manager (CIPM) — Question 185

Under the GDPR, when the applicable lawful basis for the processing of personal data is a legal obligation with which the controller must comply, which right can the data subject exercise?

Answer options

• A. Right to withdraw consent.
• B. Right to data portability.
• C. Right to restriction.
• D. Right to erasure.

Correct answer: C

Explanation

The correct answer is C, the Right to restriction, which allows data subjects to limit the processing of their data when a legal obligation is involved. The other options, such as withdrawing consent and data portability, are not applicable in this context as they pertain to different conditions of data processing under the GDPR.