Certified Information Privacy Professional – Europe (CIPP/E) — Question 210

The GDPR forbids the practice of “forum shopping”, which occurs when companies do what?

Answer options

• A. Choose the data protection officer that is most sympathetic to their business concerns.
• B. Designate their main establishment in member state with the most flexible practices.
• C. File appeals of infringement judgments with more than one EU institution simultaneously.
• D. Select third-party processors on the basis of cost rather than quality of privacy protection.

Correct answer: B

Explanation

The correct answer is B because the GDPR aims to prevent companies from exploiting differences in national laws by establishing themselves in jurisdictions with more lenient regulations. Options A, C, and D do not relate directly to the concept of forum shopping as defined by the GDPR, which specifically involves the selection of a member state based on regulatory flexibility.