Câu 16: CIPP-E: Certified Information Privacy Professional/Europe (CIPP/E)

Under the GDPR, where personal data is not obtained directly from the data subject, a controller is exempt from directly providing information about processing to the data subject if?

1. A. The data subject already has information regarding how his data will be used — đáp án hiện tại
2. B. The provision of such information to the data subject would be too problematic
3. C. Third-party data would be disclosed by providing such information to the data subject
4. D. The processing of the data subject’s data is protected by appropriate technical measures