CERTIFIED-IN-CYBERSECURITY · Question #445
Which of the following is a law with multinational implications?
The correct answer is B. GDPR. The General Data Protection Regulation (GDPR) is an EU regulation that has multinational reach: it applies to any organization worldwide that processes the personal data of EU/EEA residents, regardless of where the organization is based. ISO 27001 and ISO 27002 are…
Question
Which of the following is a law with multinational implications?
Options
- ANIST 803
- BGDPR
- CISO 27002
- DISO 27001
How the community answered
(21 responses)- B90% (19)
- C5% (1)
- D5% (1)
Explanation
The General Data Protection Regulation (GDPR) is an EU regulation that has multinational reach: it applies to any organization worldwide that processes the personal data of EU/EEA residents, regardless of where the organization is based. ISO 27001 and ISO 27002 are international standards and frameworks (not laws), and 'NIST 803' is not a recognized standard (NIST publishes Special Publication 800-series guidelines, which are US-focused frameworks, not binding international law).
Topics
Community Discussion
No community discussion yet for this question.