Under the General Data Protection Regulation (GDPR), European Union member states may be allowed to transfer personal data to the United States in some cases.
Which of the following could NOT be used as a legitimate means of doing this?
Suggested Answer: C
Get Premium CIPP/A Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
11 comments · newest first
KI
Kiley
1 year ago
Certification mechanisms are still in play, right?
AN
Antonio
1 year ago
Isn't consent always a way to transfer data?
SH
Sheron
1 year ago
Wait, I thought BCRs were complicated but valid?
DO
Dorathy
1 year ago
Totally agree, it's not a legit option anymore!
AN
Annamaria
1 year ago
The Safe Harbor Framework was invalidated in 2015.
JO
Jovita
1 year ago
I practiced a question similar to this, and I think certification mechanisms are still acceptable under GDPR, but I'm not 100% certain.
LA
Latonia
1 year ago
Binding Corporate Rules seem like a valid option, but I can't recall if there are specific conditions that need to be met.
MA
Maia
1 year ago
I'm not entirely sure, but I feel like consent derogation could be used if the individual agrees to the transfer.
SH
Shaniqua
1 year ago
I think I remember that the Safe Harbor Framework was invalidated, so it might not be a legitimate means anymore.
DO
Domonique
1 year ago
Okay, I think I understand this question. I'll need to count the number of invalid cells in the state table based on the state diagram. That should give me the answer.
XU
Xuan
1 year ago
Ah, I think I've seen this before. If I remember correctly, the license files are stored in the system directory, which would be option B.