Certified Information Privacy Professional – Europe (CIPP/E) — Question 33

What is the MAIN reason GDPR Article 4(22) establishes the concept of the “concerned supervisory authority”?

Answer options

• A. To encourage the consistency of local data processing activity.
• B. To give corporations a choice about who their supervisory authority will be.
• C. To ensure the GDPR covers controllers that do not have an establishment in the EU but have a representative in a member state.
• D. To ensure that the interests of individuals residing outside the lead authority’s jurisdiction are represented.

Correct answer: D

Explanation

The correct answer is D because the provision aims to protect the rights of individuals who are not covered by the lead supervisory authority's jurisdiction. Option A is incorrect as the focus is not on encouraging consistency but on representation. Option B is wrong because corporations do not have a choice in supervisory authority; it is determined based on the location of data subjects. Option C, while relevant, does not capture the main reason for the establishment of the 'concerned supervisory authority.'