Certified Information Privacy Professional – Europe (CIPP/E) — Question 65

A U.S. company’s website sells widgets. Which of the following factors would NOT in itself subject the company to the GDPR?

Answer options

• A. The widgets are offered in EU and priced in euro.
• B. The website is in English and French, and is accessible in France.
• C. An affiliate office is located in France but the processing is in the U.S.
• D. The website places cookies to monitor the EU website user behavior.

Correct answer: B

Explanation

Option B is correct because simply having a website in multiple languages and accessible from a country does not automatically subject a company to GDPR. Options A, C, and D involve factors that directly relate to the targeting of EU customers or processing of their data, which can trigger GDPR compliance requirements.