nerdexam
CompTIA

SY0-701 · Question #394

Which of the following addresses individual rights such as the right to be informed, the right of access, and the right to be forgotten?

The correct answer is A. GDPR. GDPR (General Data Protection Regulation) is an EU regulation specifically designed to protect individual privacy rights, including the right to be informed (knowing how your data is used), the right of access (obtaining a copy of your data), and the right to be forgotten…

Submitted by minji_kr· Mar 6, 2026Security program management and oversight

Question

Which of the following addresses individual rights such as the right to be informed, the right of access, and the right to be forgotten?

Options

  • AGDPR
  • BPCI DSS
  • CNIST
  • DISO

How the community answered

(51 responses)
  • A
    94% (48)
  • C
    4% (2)
  • D
    2% (1)

Explanation

GDPR (General Data Protection Regulation) is an EU regulation specifically designed to protect individual privacy rights, including the right to be informed (knowing how your data is used), the right of access (obtaining a copy of your data), and the right to be forgotten (requesting deletion of your data) - making A the correct answer.

PCI DSS (B) is focused on securing payment card data for merchants and financial institutions, not individual privacy rights. NIST (C) is a U.S. government framework providing cybersecurity guidelines and standards, not a regulation granting individual rights. ISO (D) produces international standards (like ISO 27001 for information security management) but does not grant legal rights to individuals.

Memory tip: Think of GDPR as the "people's privacy law" - it's the one that empowers individuals to control their personal data, while the others are frameworks or standards aimed at organizations.

Topics

#GDPR#Data Privacy#Individual Rights#Regulatory Compliance

Community Discussion

No community discussion yet for this question.

Full SY0-701 Practice