EUGDPRDpo GovernanceEASYFree question
A DPO must not receive instructions regarding:
- A.The exercise of their tasks - they must be independent in performing their data protection duties
- B.The organization's general policies, under Article 8(2), which removes any obligation to make reasonable efforts to verify parental consent
- C.Administrative procedures, per Article 38(5), which removes the confidentiality obligation the DPO owes regarding the performance of their tasks
- D.Their work schedule
Why A is correct
Article 38(3) states that the DPO shall not receive any instructions regarding the exercise of their tasks, ensuring independence in data protection matters.
Know someone studying for GDPR? Send them this one.