Under the GDPR, which essential pieces of information must be provided to data subjects before collecting their personal data?

Question

Options

• AThe authority by which the controller is collecting the data and the third parties to whom the data
• BThe name/s of relevant government agencies involved and the steps needed for revising the data.
• CThe identity and contact details of the controller and the reasons the data is being collected.
• DThe contact information of the controller and a description of the retention policy.

• B
  3% (1)
• C
  94% (33)
• D
  3% (1)

Explanation

The GDPR requires that data subjects are provided with certain information when their personal data are collected, either from the data subject themselves or from another source. This information includes, among other things, the identity and contact details of the controller (and, where applicable, of the controller's representative and the data protection officer), and the purposes of the processing for which the personal data are intended as well as the legal basis for the processing. This information is necessary to ensure fair and transparent processing of personal data, and to enable data subjects to exercise their rights under the GDPR. Therefore, option C is the correct answer, as it contains two of the essential pieces of information that must be provided to data subjects before collecting their personal data. Options A, B and D are incorrect, as they do not include all the required information or include information that is not

No community discussion yet for this question.