Certified Information Privacy Professional – Europe (CIPP/E) — Question 215

If a company chooses to ground an international data transfer on the contractual route, which of the following is NOT a valid set of standard contractual clauses?

Answer options

• A. Decision 2001/497/EC (EU controller to non-EU or EEA controller).
• B. Decision 2004/915/EC (EU controller to non-EU or EEA controller).
• C. Decision 2007/72/EC (EU processor to non-EU or EEA controller).
• D. Decision 2010/87/EU (Non-EU or EEA processor from EU controller).

Correct answer: C

Explanation

The correct answer is C because Decision 2007/72/EC does not exist as a valid set of standard contractual clauses for EU processors transferring data to non-EU or EEA controllers. Options A, B, and D represent valid decisions that provide frameworks for data transfers in the specified contexts.