MENU
Under the GDPR. when the applicable lawful basis for the processing of personal data is a legal obligation with which the controller must comply. which right can the data subject exercise?
Suggested Answer: C
Get Premium CIPM Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
Under the GDPR, when the applicable lawful basis for the processing of personal data is a legal obligation with which the controller must comply, the data subject can exercise the right to restriction. This means that the data subject can request the controller to limit the processing of their personal data in certain circumstances, such as when they contest the accuracy or lawfulness of the processing. The other rights are not applicable in this case, as they are either dependent on consent (right to withdraw consent and right to data portability) or subject to exceptions (right to erasure).Reference:GDPR, Articles 6(1), 18, 21(1).
33 comments · newest first
IS
Isabelle
11 months ago
Wait, can you really restrict data if it's a legal obligation?
HO
Hoa
11 months ago
Right to data portability doesn't apply here.
RO
Rosendo
12 months ago
Right to erasure sounds plausible, but I'm not sure.
HO
Honey
12 months ago
I think it's the right to restriction!
SI
Sina
1 year ago
It's definitely not the right to withdraw consent.
PA
Pansy
1 year ago
I’m leaning towards the right to restriction, but I can't recall if there are exceptions when it comes to legal obligations.
BE
Bev
1 year ago
I feel like the right to erasure is usually tied to consent, so it might not be the right answer here.
CH
Charlette
1 year ago
I remember practicing a question like this, and I think the right to restriction could be relevant when a legal obligation is involved.
CH
Chaya
1 year ago
I think the right to withdraw consent might not apply here since it's about a legal obligation, but I'm not entirely sure.
CH
Chandra
1 year ago
I think the key here is recognizing that with a legal obligation, the data subject doesn't have the right to withdraw consent or the right to data portability. The right to restriction seems like the best option based on the information provided. I'll go with that unless I can come up with a better understanding.
RO
Ronnie
1 year ago
Wait, I'm a little confused. If the lawful basis is a legal obligation, doesn't that mean the controller has to comply with that obligation regardless of the data subject's wishes? I'm not sure the right to restriction is the right answer here. Let me think this through again.
VI
Virgilio
1 year ago
Okay, I've got this. When the lawful basis is a legal obligation, the data subject's right to withdraw consent doesn't apply. The right to restriction is the correct answer here. I'm confident in this one.
DA
Darrel
1 year ago
Hmm, this one's a bit of a head-scratcher. The key seems to be understanding the relationship between the lawful basis of legal obligation and the data subject's rights. I'll need to review that part of the GDPR material again to make sure I get the right answer.
SA
Sarah
1 year ago
This question is tricky, as the GDPR has a lot of different rights and lawful bases to keep track of. I'll need to carefully read through the options and think about how the right to withdraw consent, data portability, restriction, and erasure apply in this scenario.
RH
Rhea
1 year ago
Okay, let's break this down step-by-step. We need to support analysis based on all three date foreign keys, so creating separate queries for each one makes sense. I'll need to double-check the details, but this solution seems like it could work.
LA
Laticia
1 year ago
Okay, I've got this. The best way to reduce call volume is to create an FAQ knowledge article and deploy a chatbot. That covers the most common questions and provides an easy self-service option for customers.
EV
Eva
1 year ago
I think option A makes sense since a new distribution center could improve delivery times, which is important for customer service.
JA
Javier
2 years ago
I see your point, Ivette, but I still think it's C) Right to restriction because the controller must comply with a legal obligation.
PO
Polly
2 years ago
A) Right to withdraw consent. Ha! Good one, but that's not relevant when the basis is a legal requirement, not consent.
JO
Joaquin
2 years ago
C) Right to restriction. That's right, the data subject can exercise the right to restriction in this situation.
DA
Daryl
2 years ago
A) Right to withdraw consent. That's correct, it wouldn't apply in this case.
LA
Lamonica
2 years ago
I'm not sure, but I think it might be B) Right to data portability.
PA
Pamela
2 years ago
D) Right to erasure. Hmm, not quite. That's for when the processing is based on consent or legitimate interests, not legal obligations.
DA
Dante
2 years ago
B) Right to data portability? Really? That wouldn't make sense here. The GDPR is all about protecting data, not making it portable.
LI
Lino
2 years ago
C) Right to restriction. That's the correct answer, as the GDPR grants the data subject the right to restrict processing when the legal basis is a legal obligation.
JO
Jolanda
2 years ago
D) Right to erasure.
LA
Lashawna
2 years ago
C) Right to restriction.
AN
Antonette
2 years ago
B) Right to data portability.
JA
Janey
2 years ago
A) Right to withdraw consent.
VI
Vilma
2 years ago
Yes, that's correct. The data subject can exercise the right to restriction when the processing is based on a legal obligation.
VI
Vilma
2 years ago
C) Right to restriction.
IV
Ivette
2 years ago
I disagree, I believe the correct answer is D) Right to erasure.
JA
Javier
2 years ago
I think the answer is C) Right to restriction.