What is the main focus of the General Data Protection Regulation (GDPR)?

Question

Options

• AProtecting financial data in banking institutions
• BEnsuring the security of healthcare information
• CProtecting the privacy and personal data of EU citizens
• DEstablishing cybersecurity standards for critical infrastructure

• A
  2% (1)
• B
  4% (2)
• C
  94% (48)

Explanation

C is correct because GDPR (General Data Protection Regulation), enacted by the European Union in 2018, is specifically designed to give EU citizens control over their personal data and standardize data privacy laws across member states - it applies broadly to any organization processing EU residents' data, regardless of industry.

Why the distractors are wrong:

• A is wrong because GDPR is not sector-specific; financial data protection in banking falls under regulations like PSD2 or national banking laws.
• B is wrong because healthcare information security is governed by sector-specific rules (e.g., HIPAA in the US); GDPR covers health data as a category of personal data, but that is not its main focus.
• D is wrong because critical infrastructure cybersecurity is addressed by frameworks like the EU's NIS Directive, not GDPR.

Memory tip: Think of the acronym - General Data Protection = it is general (not sector-specific) and about data protection for people, not systems or institutions. If the answer sounds like it narrows GDPR to one industry, it's a distractor.

No community discussion yet for this question.