U.S. Independence Day Deal! Unlock 25% OFF Today – Limited-Time Offer - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

IAPP CIPP-E Exam - Topic 8 Question 49 Discussion

An organization receives a request multiple times from a data subject seeking to exercise his rights with respect to his own personal data. Under what condition can the organization charge the data subject a fee for processing the request?
B) Only to the extent this is allowed under the restrictions on data subjects' rights introduced under Art 23 of GDPR.
A) Only where the organization can show that it is reasonable to do so because more than one request was made.
C) Only where the administrative costs of taking the action requested exceeds a certain threshold.
D) Only if the organization can demonstrate that the request is clearly excessive or misguided.

IAPP CIPP-E Exam - Topic 8 Question 49 Discussion

Actual exam question for IAPP's CIPP-E exam
Question #: 49
Topic #: 8
[All CIPP-E Questions]

An organization receives a request multiple times from a data subject seeking to exercise his rights with respect to his own personal dat

a. Under what condition can the organization charge the data subject a fee for processing the request?

Show Suggested Answer Hide Answer
Suggested Answer: B

Contribute your Thoughts:

0/2000 characters
Maile
8 months ago
Nah, it should be free for data subjects, no fees!
upvoted 0 times
...
Van
8 months ago
I think it’s only if costs are high, like option C says.
upvoted 0 times
...
Norah
8 months ago
Wait, can they really charge for multiple requests?
upvoted 0 times
...
Garry
8 months ago
Totally agree, option D makes sense!
upvoted 0 times
...
Salena
8 months ago
Organizations can charge if the request is excessive.
upvoted 0 times
...
Tabetha
8 months ago
I vaguely remember that fees can be charged if the administrative costs are high, but I can't remember what that threshold is supposed to be.
upvoted 0 times
...
Temeka
8 months ago
I feel like the organization can charge a fee if they can prove the request is unreasonable, but I’m not confident about the exact wording.
upvoted 0 times
...
Fatima
8 months ago
I think I came across a practice question that mentioned Art 23 of GDPR, but I can't recall the details about the restrictions on data subjects' rights.
upvoted 0 times
...
Jeanice
9 months ago
I remember something about charging fees only if the request is excessive, but I'm not sure if "excessive" means something specific.
upvoted 0 times
...
Rikki
9 months ago
This question is testing our understanding of how R-LFA selects a backup router. I'm pretty confident I can figure this out.
upvoted 0 times
...
Lizbeth
9 months ago
I'm pretty confident the answer is D. Rate makes the most sense given the information provided about the frequency and duration of the incidents.
upvoted 0 times
...

Save Cancel