Netskope NSK101 Exam - Topic 4 Question 39 Discussion

Actual exam question for Netskope's NSK101 exam

Question #: 39
Topic #: 4

[All NSK101 Questions]

Which compliance standard should a company consider if both controllers and processors have legal entities in the EU?

APCI-DSS

BGDPR

CSafe Harbor

DLGPD

Show Suggested Answer

Suggested Answer: B

The General Data Protection Regulation (GDPR) is the compliance standard a company should consider if both controllers and processors have legal entities in the EU. The GDPR applies to any organization that processes personal data of individuals within the EU, regardless of where the organization itself is based. This regulation imposes strict rules on data handling and provides robust protection for personal data.

GDPR is designed to protect data privacy for all individuals within the European Union (EU) and the European Economic Area (EEA). It also addresses the export of personal data outside the EU and EEA areas.

by Edwin at Aug 01, 2025, 05:14 AM

Limited Time Offer

25%

Off

Get Premium NSK101 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Veronika

2 months ago

I thought PCI-DSS was more about payment data, not general compliance.

upvoted 0 times

...

Christene

2 months ago

LGPD is for Brazil, not EU.

upvoted 0 times

...

Kami

2 months ago

Wait, isn't Safe Harbor outdated?

upvoted 0 times

...

Carlee

2 months ago

Agreed, GDPR is a must for compliance in the EU.

upvoted 0 times

...

Tresa

3 months ago

Definitely GDPR, it's the main one for EU entities.

upvoted 0 times

...

Regenia

3 months ago

LGPD is for Brazil, right? I feel like GDPR is the most relevant here, especially with both controllers and processors in the EU.

upvoted 0 times

...

Mozell

4 months ago

I’m a bit confused; I thought Safe Harbor was relevant, but I think it was replaced by something else.

upvoted 0 times

...

Lauran

4 months ago

I remember practicing a question about compliance standards, and GDPR was definitely mentioned as crucial for EU entities.

upvoted 0 times

...

Kallie

4 months ago

I think it might be GDPR since it specifically applies to data protection in the EU, but I'm not entirely sure.

upvoted 0 times

...

Haydee

4 months ago

GDPR, for sure. The key detail here is that both the controllers and processors have legal entities in the EU. That means the GDPR regulations would apply, as it covers the processing of personal data of EU residents by organizations inside or outside the EU.

upvoted 0 times

...

Edison

4 months ago

Okay, I think I've got it. Since the question specifies that both the controllers and processors have legal entities in the EU, that means the GDPR would be the appropriate compliance standard to consider. The GDPR applies to any organization that processes personal data of EU residents, regardless of the organization's location.

upvoted 0 times

...

Floyd

4 months ago

Hmm, I'm not totally sure about this one. I know GDPR is the EU's data privacy regulation, but I'm not certain if it would apply in this case since the question mentions both controllers and processors. Let me think this through a bit more.

upvoted 0 times

...

Gracie

5 months ago

This one seems straightforward - if both controllers and processors have legal entities in the EU, then the GDPR compliance standard would be the most relevant.

upvoted 0 times

...