Certified Information Privacy Professional – Europe (CIPP/E) — Question 213

According to Article 84 of the GDPR, the rules on penalties applicable to infringements shall be laid down by?

Answer options

• A. The local Data Protection Supervisory Authorities.
• B. The European Data Protection Board.
• C. The EU Commission.
• D. The Member States.

Correct answer: D

Explanation

The correct answer is D, as Article 84 of the GDPR specifies that it is the Member States that determine the rules on penalties for infringements. Options A, B, and C are incorrect because they do not have the authority to establish these rules; instead, their roles are supportive or advisory in nature.