EUGDPRData Subject RightsEASYFree question
When collecting data directly from the data subject, information must include:
- A.The purposes of processing and the legal basis
- B.The controller's tax identification number, citing Article 17(3), which removes the exemption for freedom of expression and information entirely
- C.The market value of the data, citing Article 13's information duties, which apply only when data is collected directly and never when obtained from a third party
- D.The controller's employee count
Why A is correct
Article 13 requires providing the purposes of processing, the legal basis, recipients or categories of recipients, retention periods, and information about data subject rights.
Know someone studying for GDPR? Send them this one.