Certified Information Privacy Professional – Europe (CIPP/E) — Question 121

Which institution has the power to adopt findings that confirm the adequacy of the data protection level in a non-EU country?

Answer options

• A. The European Parliament
• B. The European Commission
• C. The Article 29 Working Party
• D. The European Council

Correct answer: B

Explanation

The correct answer is B, as the European Commission has the authority to assess and confirm whether a non-EU country provides adequate data protection according to EU standards. The other options, while influential in EU legislative processes, do not have the specific mandate to make such determinations regarding data protection adequacy.