Certified Information Privacy Professional – Europe (CIPP/E) — Question 101

Articles 13 and 14 of the GDPR provide details on the obligation of data controllers to inform data subjects when collecting personal data. However, both articles specify an exemption for situations in which the data subject already has the information.

Which other situation would also exempt the data controller from this obligation under Article 14?

Answer options

• A. When providing the information would go against a police order.
• B. When providing the information would involve a disproportionate effort.
• C. When the personal data was obtained through multiple source in the public domain.
• D. When the personal data was obtained 5 years before the entry into force of the GDPR.

Correct answer: B

Explanation

The correct answer, B, indicates that if providing the information requires excessive effort, the data controller may be exempt from informing the data subject. Option A is incorrect because a police order does not exempt the obligation unless specified. Option C is wrong as obtaining data from public sources does not negate the requirement to inform. Option D is incorrect since the age of the data does not affect the obligation under GDPR.