Certified Information Privacy Professional – Europe (CIPP/E) — Question 86

Which EU institution is vested with the competence to propose new data protection legislation on its own initiative?

Answer options

• A. The European Council
• B. The European Parliament
• C. The European Commission
• D. The Council of the European Union

Correct answer: C

Explanation

The European Commission is the only institution that can propose new legislation on its own initiative, including data protection laws. The European Council and the Council of the European Union focus more on policy direction and legislative approval rather than initiating proposals, while the European Parliament primarily reviews and amends legislation presented to it.