Microsoft 365 Fundamentals — Question 25

You are the Microsoft 365 administrator for a company.
An employee requests personal data under General Data Protection Regulation (GDPR) guidelines.
You need to retrieve data for the employee.
What should you do?

Answer options

• A. Create a data subject request case.
• B. Create a retention policy.
• C. Create a data-loss prevention policy.
• D. Create a GDPR assessment.

Correct answer: A

Explanation

The correct approach is to create a data subject request case, as this is specifically designed to handle requests for personal data under GDPR. The other options, such as retention policies and data-loss prevention policies, do not directly address the retrieval of personal data requested by an employee.