Certified Information Privacy Professional – Europe (CIPP/E) — Question 38

Which mechanism, new to the GDPR, now allows for the possibility of personal data transfers to third countries under Article 42?

Answer options

• A. Approved certifications.
• B. Binding corporate rules.
• C. Law enforcement requests.
• D. Standard contractual clauses.

Correct answer: D

Explanation

The correct answer is D, as the GDPR introduced standard contractual clauses as a means to legitimize transfers of personal data to third countries. Options A and B refer to other mechanisms that exist but are not specific to Article 42, while C is irrelevant as it does not pertain to data transfer mechanisms under GDPR.