MENU
Which compliance standard should a company consider if both controllers and processors have legal entities in the EU?
Suggested Answer: B
Get Premium NSK101 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
The General Data Protection Regulation (GDPR) is the compliance standard a company should consider if both controllers and processors have legal entities in the EU. The GDPR applies to any organization that processes personal data of individuals within the EU, regardless of where the organization itself is based. This regulation imposes strict rules on data handling and provides robust protection for personal data.
GDPR is designed to protect data privacy for all individuals within the European Union (EU) and the European Economic Area (EEA). It also addresses the export of personal data outside the EU and EEA areas.
26 comments · newest first
VE
Veronika
9 months ago
I thought PCI-DSS was more about payment data, not general compliance.
CH
Christene
9 months ago
LGPD is for Brazil, not EU.
KA
Kami
10 months ago
Wait, isn't Safe Harbor outdated?
CA
Carlee
10 months ago
Agreed, GDPR is a must for compliance in the EU.
TR
Tresa
11 months ago
Definitely GDPR, it's the main one for EU entities.
RE
Regenia
11 months ago
LGPD is for Brazil, right? I feel like GDPR is the most relevant here, especially with both controllers and processors in the EU.
MO
Mozell
11 months ago
I’m a bit confused; I thought Safe Harbor was relevant, but I think it was replaced by something else.
LA
Lauran
11 months ago
I remember practicing a question about compliance standards, and GDPR was definitely mentioned as crucial for EU entities.
KA
Kallie
11 months ago
I think it might be GDPR since it specifically applies to data protection in the EU, but I'm not entirely sure.
HA
Haydee
12 months ago
GDPR, for sure. The key detail here is that both the controllers and processors have legal entities in the EU. That means the GDPR regulations would apply, as it covers the processing of personal data of EU residents by organizations inside or outside the EU.
ED
Edison
12 months ago
Okay, I think I've got it. Since the question specifies that both the controllers and processors have legal entities in the EU, that means the GDPR would be the appropriate compliance standard to consider. The GDPR applies to any organization that processes personal data of EU residents, regardless of the organization's location.
FL
Floyd
12 months ago
Hmm, I'm not totally sure about this one. I know GDPR is the EU's data privacy regulation, but I'm not certain if it would apply in this case since the question mentions both controllers and processors. Let me think this through a bit more.
GR
Gracie
1 year ago
This one seems straightforward - if both controllers and processors have legal entities in the EU, then the GDPR compliance standard would be the most relevant.
MA
Mable
1 year ago
The only option that makes sense here is GDPR. It's the big kahuna of data privacy in the EU.
MY
Myra
1 year ago
GDPR is the way to go. I'd be surprised if anyone even considers the other options.
JO
Jolene
1 year ago
Haha, Safe Harbor? That's so 2015. GDPR is where it's at these days.
LE
Leigha
9 months ago
PCI-DSS is important, but not for this situation.
CH
Chaya
10 months ago
GDPR is definitely the current standard.
AD
Adela
10 months ago
Safe Harbor is outdated for sure!
RO
Royce
10 months ago
GDPR covers both controllers and processors well.
ST
Stefania
1 year ago
B. GDPR is the correct answer. Can't go wrong with the EU's data protection regulation.
CO
Colby
1 year ago
B) GDPR
FA
Fannie
1 year ago
GDPR, of course! It's the European data privacy standard that applies to both controllers and processors.
DE
Desmond
1 year ago
I agree, GDPR is the way to go for companies with legal entities in the EU.
HU
Huey
1 year ago
Yes, GDPR is definitely the compliance standard to consider in this case.
LA
Lashandra
1 year ago
GDPR, of course! It's the European data privacy standard that applies to both controllers and processors.