Certified Information Privacy Professional – Europe (CIPP/E) — Question 133

Under the GDPR, which essential pieces of information must be provided to data subjects before collecting their personal data?

Answer options

• A. The authority by which the controller is collecting the data and the third parties to whom the data will be sent.
• B. The name/s of relevant government agencies involved and the steps needed for revising the data.
• C. The identity and contact details of the controller and the reasons the data is being collected.
• D. The contact information of the controller and a description of the retention policy.

Correct answer: C

Explanation

Option C is correct because GDPR mandates that data subjects are informed about the identity of the data controller and the purposes for data collection. The other options, while they mention relevant aspects, do not cover the essential requirements laid out by the GDPR regarding transparency to data subjects.