Why A is correct
Article 28(2) requires the processor to obtain prior specific or general written authorization from the controller before engaging any sub-processor.
Know someone studying for GDPR? Send them this one.
Controller Processor
Covers controller processor concepts and practices within GDPR.
This question belongs to the "Controller & Processor Obligations" domain, which makes up about 20% of the GDPR exam.
Solve. Learn. Rank. Get Hired.
CyberCertPrep gives you 20 free GDPR questions per day with this same answer-and-explanation depth, plus timed exam simulations and progress tracking. No card required.
GDPR and EU are trademarks or registered trademarks of their respective owners. CyberCertPrep is an independent exam-preparation resource and is not affiliated with, authorized by, sponsored by, or endorsed by EU or any other certification body. All study material is independently created; the certification name is used only to identify the exam this resource helps you prepare for.