A Spanish electricity customer calls her local supplier with Questions: about the company's upcoming merger. Specifically, the customer wants to know the recipients to whom her personal data will be…

Question

Options

• AVerify that the request is applicable to the data collected before the GDPR entered into force.
• BVerify that the purpose of the request from the customer is in line with the GDPR.
• CVerify that the personal data has not already been sent to the customer.
• DVerify that the identity of the customer can be proven by other means.

• A
  5% (1)
• B
  10% (2)
• C
  5% (1)
• D
  80% (16)

Explanation

According to Article 13 of the GDPR, the controller (in this case, the electricity supplier) has the obligation to provide the data subject (in this case, the customer) with information about the processing of their personal data, including the recipients or categories of recipients of the personal data, if any. However, before providing such information, the controller must verify the identity of the data subject, to ensure that the information is not disclosed to unauthorized persons. This verification can be done by other means than the personal data already collected, such as asking for additional information, sending a verification code, or using a secure online

No community discussion yet for this question.