Certified Information Privacy Professional – Europe (CIPP/E) — Question 159

Which change was introduced by the 2009 amendments to the e-Privacy Directive 2002/58/EC?

Answer options

• A. A voluntary notification for personal data breaches applicable to all data controllers.
• B. A voluntary notification for personal data breaches applicable to electronic communication providers.
• C. A mandatory notification for personal data breaches applicable to all data controllers.
• D. A mandatory notification for personal data breaches applicable to electronic communication providers.

Correct answer: D

Explanation

The correct answer is D because the 2009 amendments established a requirement for electronic communication providers to notify users of personal data breaches. Options A and B are incorrect as they refer to voluntary notifications, which were not mandated by the amendments. Option C is also incorrect because it incorrectly states that the requirement applies to all data controllers rather than specifically to electronic communication providers.