Certified Information Privacy Professional – Europe (CIPP/E) — Question 285

Assuming that the “without undue delay” provision is followed, what is the time limit for complying with a data access request?

Answer options

• A. Within 40 days of receipt
• B. Within 40 days of receipt, which may be extended by up to 40 additional days
• C. Within one month of receipt, which may be extended by up to an additional month
• D. Within one month of receipt, which may be extended by an additional two months

Correct answer: D

Explanation

The correct answer is D, as the law allows for a one-month timeframe to respond to a data access request, which can be extended by an additional two months if necessary. Options A and B incorrectly state the time limit in days, while option C provides an incorrect extension period.