Exin PDPF Exam - Topic 5 Question 90 Discussion

Actual exam question for Exin's PDPF exam

Question #: 90
Topic #: 5

[All PDPF Questions]

What is the main purpose of the General Data Protection Regulation (GDPR)?

AProtecting the data of everyone in Europe.

BProtect the data of everyone in the world.

CProtect data of data subjects located in the European Economic Area (EEA), regardless of the country of processing.

DProtect confidential business data.

Show Suggested Answer

Suggested Answer: C

Besides to what many persons think, the GDPR does not apply only to the EU, but to all member countries of the European Economic Area (EEA) that includes, in addition to the EU member countries, Iceland, Liechtenstein and Norway.

by Arlen at Nov 22, 2025, 10:26 PM

Limited Time Offer

25%

Off

Get Premium PDPF Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Jesse

8 days ago

D is off-topic. GDPR is about personal data, not business data.

upvoted 0 times

...

Pauline

13 days ago

B is misleading. GDPR is not global, just EEA focused.

upvoted 0 times

...

Frank

18 days ago

I feel C is correct. It focuses on the location of data subjects.

upvoted 0 times

...

Rory

24 days ago

A is too broad. GDPR is not just for everyone in Europe.

upvoted 0 times

...

Lilli

29 days ago

Agreed, C makes the most sense. It's about data subjects in the EEA.

upvoted 0 times

...

Leota

1 month ago

I think it's definitely C. It covers the EEA specifically.

upvoted 0 times

...

Maybelle

2 months ago

Definitely C, it focuses on data subjects in the EEA.

upvoted 0 times

...

Ora

2 months ago

I thought it applied globally, but maybe not?

upvoted 0 times

...

Buddy

2 months ago

Wait, isn't it just for Europe?

upvoted 0 times

...

Christene

2 months ago

D) Protect confidential business data. Wait, what? This is the GDPR, not the 'Protect My Company's Secrets' regulation.

upvoted 0 times

...

Elouise

2 months ago

C) Protect data of data subjects located in the European Economic Area (EEA), regardless of the country of processing. Gotta keep that data safe, even if it's hiding in a different country.

upvoted 0 times

...

Pete

3 months ago

The GDPR is like a digital bodyguard for your data, and option C is the one that fits the job description.

upvoted 0 times

...

Dorothy

3 months ago

I definitely remember that GDPR is about personal data protection, but I’m unsure if it’s just for Europe or has a broader scope.

upvoted 0 times

...

Marcelle

3 months ago

I feel like the GDPR is supposed to protect everyone's data, but I can't recall if that includes people outside Europe.

upvoted 0 times

...

Florinda

3 months ago

I remember practicing a question similar to this, and I think the focus is on data subjects in the EEA, so I might go with C.

upvoted 0 times

...

Margo

3 months ago

I think the GDPR is mainly about protecting data in Europe, but I'm not sure if it covers just the EEA or everyone in Europe.

upvoted 0 times

...

Dominga

3 months ago

Ah, I got this! GDPR is all about giving people more control over their personal data, no matter where it's processed. Option C sounds like the best answer to me.

upvoted 0 times

...

Arlen

4 months ago

Wait, I thought GDPR was about protecting business data, not just personal data. I'm a bit confused now. Maybe I should re-read the question more closely.

upvoted 0 times

...

Mozell

4 months ago

C) Protect data of data subjects located in the European Economic Area (EEA), regardless of the country of processing.

upvoted 0 times

...

Johnathon

4 months ago

Okay, I remember learning about GDPR in class. I think the key is that it's focused on protecting the data of individuals located in the EEA, not just everyone in Europe. I'll go with option C.

upvoted 0 times

...

Natalie

4 months ago

It's all about protecting data in the EEA!

upvoted 0 times

...

Amie

4 months ago

Totally agree, it's C for sure!

upvoted 0 times

...

Doretha

5 months ago

C) Protect data of data subjects located in the European Economic Area (EEA), regardless of the country of processing. Sounds like a job for the data protection avengers!

upvoted 0 times

...