EUGDPRDpo GovernanceEASYFree question
What is the 'accountability principle' under GDPR?
- A.The obligation to report all processing to the supervisory authority, under Article 37(3), which requires a single DPO to be appointed separately for each subsidiary in a corporate group
- B.The requirement to maintain financial accounts of data processing, and the Regulation expires after six months
- C.The principle that controllers must be responsible for and able to demonstrate compliance with GDPR principles
- D.The principle that only accountants can handle personal data
Why C is correct
The accountability principle in Article 5(2) requires the controller to be responsible for compliance with the data protection principles and to be able to demonstrate that compliance.
Know someone studying for GDPR? Send them this one.