Certified Information Privacy Professional – Europe (CIPP/E) — Question 141

A German data subject was the victim of an embarrassing prank 20 years ago. A newspaper website published an article about the prank at the time, and the article is still available on the newspaper’s website. Unfortunately, the prank is the top search result when a user searches on the victim’s name. The data subject requests that SearchCo delist this result. SearchCo agrees, and instructs its technology team to avoid scanning or indexing the article. What else must SearchCo do?

Answer options

• A. Notify the newspaper that its article it is delisting the article.
• B. Fully erase the URL to the content, as opposed to delist which is mainly based on data subject’s name.
• C. Identify other controllers who are processing the same information and inform them of the delisting request.
• D. Prevent the article from being listed in search results no matter what search terms are entered into the search engine.

Correct answer: C

Explanation

The correct answer is C because when data is delisted, it is important to inform other data controllers who may be processing the same information to ensure comprehensive compliance. Option A is incorrect as notifying the newspaper is not required in this context. Option B is wrong since delisting does not necessitate the complete deletion of the URL. Option D is inaccurate because delisting is typically tied to specific search terms rather than an absolute ban on all searches.