How should a multinational organization that is migrating to Google Cloud consider security and privacy regulations to ensure that it is in compliance with global standards?

Question

Options

• AComply with data security and privacy regulations in each geographical region
• BComply with regional standards for data security and privacy, because they supersede all
• CComply with international standards for data security and privacy, because they supersede all
• DComply with regional data security regulations, because they're more complex than privacy

• A
  93% (41)
• B
  5% (2)
• C
  2% (1)

Explanation

A multinational organization must comply with the data security and privacy regulations specific to each geographical region where it operates. Different regions have distinct legal frameworks - for example, GDPR in Europe, PDPA in Thailand, LGPD in Brazil - and no single international standard universally supersedes all regional laws. Therefore, neither regional (B) nor international (C) standards alone are sufficient. Focusing only on regional data security regulations while ignoring privacy regulations (D) would also leave the organization non-compliant. Compliance requires a comprehensive, region-by-region approach.

No community discussion yet for this question.