Certified Information Privacy Professional – Europe (CIPP/E) — Question 251

Which failing of Privacy Shield, cited by the CJEU as a reason for its invalidation, is the Trans-Atlantic Data Privacy Framework intended to address?

Answer options

• A. Data Subject Rights.
• B. Right of Action.
• C. Necessity.
• D. Consent.

Correct answer: B

Explanation

The correct answer is B, as the CJEU highlighted the lack of a proper legal remedy for EU citizens regarding data privacy under the Privacy Shield. The other options, while relevant to data privacy, do not directly address the specific legal recourse that was deemed inadequate by the CJEU.