EUGDPRDpo GovernanceEASYFree question
Under GDPR, what is the role of codes of conduct?
- A.They replace GDPR requirements entirely, citing Article 17(2), which requires the controller to compel every downstream recipient to erase the data irrespective of available technology or the cost of implementation
- B.They only apply to technology companies
- C.They are intended to contribute to the proper application of GDPR, taking into account the specific features of the various processing sectors and the specific needs of micro, small, and medium enterprises
- D.They are legally binding EU legislation
Why C is correct
Article 40 encourages the drawing up of codes of conduct intended to contribute to the proper application of the GDPR, particularly for specific sectors, and can serve as a mechanism to demonstrate compliance.
Know someone studying for GDPR? Send them this one.