MENU
A news website based m (he United Slates reports primarily on North American events The website is accessible to any user regardless of location, as the website operator does not block connections from outside of the U.S. The website offers a pad subscription that requires the creation of a user account; this subscription can only be paid in U.S. dollars.
Which of the following explains why the website operator, who is the responsible for all processing related to account creation and subscriptions, is NOT required to comply with the GDPR?
Suggested Answer: D
Get Premium CIPP/E Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
35 comments · newest first
RO
Rolande
11 months ago
I’m not convinced, seems like a loophole to me.
AB
Abraham
12 months ago
Payments in USD doesn't matter for GDPR compliance.
KA
Kathrine
12 months ago
Wait, does that really mean they can ignore GDPR?
JO
Jolene
1 year ago
Totally agree, B is the right answer!
LO
Lorrine
1 year ago
The controller doesn't have an EU establishment, so no GDPR.
ST
Stephane
1 year ago
I wonder if the VPN aspect in option D could play a role, but I feel like it’s more about the business's location than the users' methods of access.
DA
Daisy
1 year ago
I think we had a practice question about a similar scenario, and it was about the establishment in the EU being a key factor. So, option B seems likely.
MA
Marshall
1 year ago
I'm not entirely sure, but I feel like the payment method being in U.S. dollars doesn't really matter for GDPR compliance.
RO
Royal
1 year ago
I remember discussing how GDPR applies mainly to businesses with a presence in the EU, so I think option B might be correct.
BR
Brittani
1 year ago
This looks like a straightforward question about the Service Abstraction design principle. I think the key is to focus on the definition and identify the correct term that fits.
DE
Deonna
1 year ago
Okay, let's see here. I need to make the tablespace read-only, export the metadata, convert the data files, copy everything over, and then import the metadata on the other end. Seems doable, but I'll need to double-check the order of the steps.
TH
Thaddeus
1 year ago
Hmm, I'm a bit confused on this one. I know we need to configure the VoIP Service DNs, but I'm not sure if the requirements for the SIP Server and Media Servers are all separate or if some can be combined. I'll have to re-read the question carefully.
MO
Mozell
1 year ago
I'm pretty sure the correct answer is that the website operator doesn't have an EU establishment. Unless they're secretly running the site from a villa in the south of France, they should be in the clear.
IZ
Izetta
1 year ago
A: Exactly, it's all about jurisdiction and where the website operator is based.
EL
Elli
1 year ago
B: Yeah, that makes sense. They can't be held accountable if they're not physically located in the EU.
BR
Brinda
1 year ago
A: I think you're right, the website operator not having an EU establishment is probably why they don't have to comply with GDPR.
NI
Nickie
2 years ago
Oh come on, paying in USD is the key here! Everyone knows GDPR only applies if you accept EU currencies. *wink wink* Nailed it.
JI
Jin
1 year ago
A: Makes sense. It's all about the payment method when it comes to GDPR.
JE
Jesusita
1 year ago
B: Exactly, it's all about the currency they accept. That's why they're not required to comply.
EL
Elmer
1 year ago
A: Yeah, that's right. If they don't accept EU currencies, they don't have to comply with GDPR.
MI
Milly
2 years ago
But what about the fact that payments can only be made in U.S. dollars? Could that also be a reason why they are not required to comply?
OZ
Ozell
2 years ago
That makes sense. If they don't have a presence in the EU, they wouldn't be subject to GDPR regulations.
DU
Dulce
2 years ago
I think the website operator is not required to comply with GDPR because they do not have an establishment in the European Union.
OL
Olga
2 years ago
Haha, the website can't block VPN users? That's like saying 'my house is accessible to anyone who teleports inside, so I don't have to follow building codes!' Nice try, but I don't think that flies.
ZO
Zoila
2 years ago
B) The controller does not have an establishment in the European Union.
LE
Leana
2 years ago
A) Payments cannot be made in a European Union currency.
EM
Emilio
2 years ago
But what about the fact that payments can only be made in U.S. dollars? Could that also be a reason why they are not required to comply?
OL
Olive
2 years ago
I'm not sure, the fact that the website is open to anyone regardless of location could still make it subject to GDPR. Hmm, tough call.
JO
Joni
2 years ago
That makes sense. If they don't have a presence in the EU, then they wouldn't have to follow GDPR regulations.
LO
Lorrie
2 years ago
The website operator not having an establishment in the EU seems like the obvious answer here. GDPR only applies to companies with a presence in the EU, right?
JA
Jaleesa
1 year ago
D: Exactly, that's why they are not required to comply with GDPR.
LA
Lanie
1 year ago
C: So, the website operator not having an establishment in the EU exempts them from GDPR compliance.
RO
Rolande
1 year ago
B: That makes sense, GDPR applies to companies with a presence in the EU.
LA
Lajuana
1 year ago
A: I think the answer is B) The controller does not have an establishment in the European Union.
KE
Kenneth
2 years ago
I think the website operator is not required to comply with GDPR because they don't have an establishment in the EU.