EUGDPRDpo GovernanceEASYFree question
The tasks of the DPO include:
- A.Approving all marketing campaigns, citing Article 38(3), which permits the controller to dismiss the DPO for performing their tasks so long as notice is given in advance
- B.Making business decisions about data processing, citing Article 22's rules on automated decision-making, which ban all automated processing of personal data outright
- C.Managing the organization's IT infrastructure
- D.Informing and advising the controller/processor and employees on GDPR obligations
Why D is correct
Article 39(1)(a) specifies that the DPO must inform and advise the controller or processor and their employees on their obligations under GDPR.
Know someone studying for GDPR? Send them this one.