Câu 36: CIPP-E: Certified Information Privacy Professional/Europe (CIPP/E)

The GDPR specifies fines that may be levied against data controllers for certain infringements. Which of the following infringements would be subject to the less severe administrative fine of up to 10 million euros (or in the case of an undertaking, up to 2% of the total worldwide annual turnover of the preceding financial year)?

1. A. Failure to demonstrate that consent was given by the data subject to the processing of their personal data where it is used as the basis for processing.
2. B. Failure to implement technical and organizational measures to ensure data protection is enshrined by design and default. — đáp án hiện tại
3. C. Failure to process personal information in a manner compatible with its original purpose.
4. D. Failure to provide the means for a data subject to rectify inaccuracies in personal data.