Certified Information Privacy Professional – Europe (CIPP/E) — Question 91

Select the answer below that accurately completes the following:
“The right to compensation and liability under the GDPR…

Answer options

• A. …provides for an exemption from liability if the data controller (or data processor) proves that it is not in any way responsible for the event giving rise to the damage.”
• B. …precludes any subsequent recourse proceedings against other controllers or processors involved in the same processing.”
• C. ...can only be exercised against the data controller, even if a data processor was involved in the same processing.”
• D. …is limited to a maximum amount of EUR 20 million per event of damage or loss.”

Correct answer: A

Explanation

Option A is correct because it aligns with GDPR provisions that allow a data controller or processor to avoid liability if they can prove lack of responsibility for the incident. The other options are incorrect as they misinterpret the scope of liability and recourse under GDPR, as well as the claims process and the limitation on compensation amounts.