Câu 13: CIPP-E: Certified Information Privacy Professional/Europe (CIPP/E)

Under the GDPR, who would be LEAST likely to be allowed to engage in the collection, use, and disclosure of a data subject’s sensitive medical information without the data subject’s knowledge or consent?

1. A. A member of the judiciary involved in adjudicating a legal dispute involving the data subject and concerning the health of the data subject.
2. B. A public authority responsible for public health, where the sharing of such information is considered necessary for the protection of the general populace.
3. C. A health professional involved in the medical care for the data subject, where the data subject’s life hinges on the timely dissemination of such information.
4. D. A journalist writing an article relating to the medical condition in question, who believes that the publication of such information is in the public interest. — đáp án hiện tại