ACFE CFE-Law Exam - Topic 3 Question 84 Discussion

Question

Which of the following is a requirement of the European Union's (EU) General Data Protection Regulation (GDPR)?

Ashlee · Accepted Answer

A) An organization must obtain a data subject's consent before collecting or processing personal data about that individual.

Ashlee · Answer

B) An organization must refrain from confirming or denying whether it is in possession of a data subject's personal data even if the data subject requests this information.

Ashlee · Answer

C) An organization must provide a data subject's personal data upon that individual's request for a reasonable fee.

Ashlee · Answer

D) An organization must notify all affected data subjects within six months when a data breach occurs that is likely to result in a high risk to their rights and freedoms.