Certified Information Privacy Professional – Europe (CIPP/E) — Question 81

When would a data subject NOT be able to exercise the right to portability?

Answer options

• A. When the processing is necessary to perform a task in the exercise of authority vested in the controller.
• B. When the processing is carried out pursuant to a contract with the data subject.
• C. When the data was supplied to the controller by the data subject.
• D. When the processing is based on consent.

Correct answer: A

Explanation

The correct answer is A because the right to portability does not apply when processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority. Options B, C, and D all involve scenarios where data subjects have rights to portability, as they relate to contractual agreements, provided data, or consent, respectively.