Certified Information Privacy Professional – Europe (CIPP/E) — Question 142

Following the United Kingdom's withdrawal from the European Union, what law do companies established in the UK and processing the personal data of people in the EU need to adhere to?

Answer options

• A. The Privacy and Electronic Communications Regulations.
• B. The EU General Data Protection Regulation.
• C. The UK General Data Protection Regulation.
• D. The UK Data Protection Act.

Correct answer: C

Explanation

The UK General Data Protection Regulation is the correct answer because it governs data protection in the UK post-Brexit. The EU General Data Protection Regulation applies to entities within the EU, while the other options relate to different aspects of data protection or are outdated in this context.