A multinational company transfers customer data from its EU branch to its parent company in a country without an adequacy decision. The parent company uses the data for marketing purposes not originally disclosed to customers. The EU branch has implemented SCCs. What additional step is REQUIRED for GDPR compliance?

Ensure the transfer complies with the purpose limitation principle

Conduct a data protection impact assessment (DPIA) for the transfer

Obtain a new adequacy decision from the receiving country

Anonymize the data before transfer

Certified Data Privacy Solutions Engineer

Domain 3Objective 6

Data Disclosure and Transfer CDPSE Practice Questions (Page 6)

Part of the Data Life Cycle Management domain, which accounts for 23% of the CDPSE exam.

26questions here

6free pages

6concepts

23%of the exam

Questions 26–26

26application · medium
A multinational company transfers customer data from its EU branch to its parent company in a country without an adequacy decision. The parent company uses the data for marketing purposes not originally disclosed to customers. The EU branch has implemented SCCs. What additional step is REQUIRED for GDPR compliance?
Select an answer first

Finished these 1 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CDPSE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISACA. “CDPSE” is a trademark of its owner, used for identification only.

Data Disclosure and Transfer CDPSE Practice Questions (Page 6)

Questions 26–26

Keep studying — Data Life Cycle Management