Certified Information Privacy Professional – Europe (CIPP/E) — Question 66

What is true of both the General Data Protection Regulation (GDPR) and the Council of Europe Convention 108?

Answer options

• A. Both govern international transfers of personal data
• B. Both govern the manual processing of personal data
• C. Both only apply to European Union countries
• D. Both require notification of processing activities to a supervisory authority

Correct answer: A

Explanation

Answer A is correct because both GDPR and Convention 108 include provisions for the international transfer of personal data. Option B is incorrect because GDPR applies to both automated and manual data processing, not just manual. Option C is wrong as GDPR applies to all organizations processing personal data of EU residents, regardless of their location, while Convention 108 has a broader scope beyond just EU countries. Option D is not entirely accurate since GDPR has specific requirements for notification that differ from those in Convention 108.