Câu 98: CIPP-E: Certified Information Privacy Professional/Europe (CIPP/E)

What are the obligations of a processor that engages a sub-processor?

1. A. The processor must give the controller prior written notice and perform a preliminary audit of the sub-processor.
2. B. The processor must obtain the controller’s specific written authorization and provide annual reports on the sub-processor’s performance.
3. C. The processor must receive a written agreement that the sub-processor will be fully liable to the controller for the performance of its obligations in relation to the personal data concerned.
4. D. The processor must obtain the consent of the controller and ensure the sub-processor complies with data processing obligations that are equivalent to those that apply to the processor. — đáp án hiện tại