Certified Information Privacy Professional – United States (CIPP/US) — Question 127

As a result of the Schrems II decision and CJEU opinion, what would the preferred course of action be if a Section 702 disclosure related to a foreign entity is required?

Answer options

• A. Ensure that the most recent SCC from the European Commission is being executed as a valid method of adequacy.
• B. Provide 30 days notice to affected parties to allow the opportunity for filing a motion to quash with the court.
• C. Seek redress from the court pursuing a protective order, since the consumer is unable to file a motion to quash.
• D. Seek the advice of outside counsel and conduct a transfer impact assessment.

Correct answer: D

Explanation

The correct answer is D because seeking the guidance of outside counsel and conducting a transfer impact assessment are crucial steps in ensuring compliance with international data transfer regulations post-Schrems II. Options A, B, and C do not adequately address the need for legal compliance and risk assessment in the context of foreign disclosures.