Certified Information Privacy Professional – United States (CIPP/US) — Question 192

Under the EU-US Data Privacy Framework, what must participating organizations provide to individuals in regard to complaints and disputes?

Answer options

• A. An independent recourse mechanism.
• B. A copy of the individual’s personal data.
• C. A description of the organization’s data processing policies.
• D. A means of communicating with the organization’s privacy team.

Correct answer: A

Explanation

The correct answer is A because the EU-US Data Privacy Framework requires that organizations must provide an independent recourse mechanism to address complaints. Options B, C, and D, while potentially useful, do not specifically address the requirement for handling complaints and disputes under this framework.