Certified Information Privacy Professional – Europe (CIPP/E) — Question 39

With respect to international transfers of personal data, the European Data Protection Board (EDPB) confirmed that derogations may be relied upon under what condition?

Answer options

• A. If the data controller has received preapproval from a Data Protection Authority (DPA), after submitting the appropriate documents.
• B. When it has been determined that adequate protection can be performed.
• C. Only if the Data Protection Impact Assessment (DPIA) shows low risk.
• D. Only as a last resort and when interpreted restrictively.

Correct answer: D

Explanation

The correct answer is D because the EDPB emphasizes that derogations for international data transfers should be used sparingly and only under stringent conditions. The other options suggest more lenient conditions or requirements that do not align with the EDPB's restrictive interpretation of when derogations are permissible.