Answer-first summary for fast verification
Answer: The right of individuals to receive their personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller without hindrance., The obligation for organizations to encrypt all personal data during transfer to ensure security and prevent unauthorized access.
Correct Options: B and A. The right to receive personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller without hindrance (B) is a core aspect of data portability under GDPR. Additionally, while not a direct requirement of data portability, the obligation to encrypt data during transfer (A) is a best practice that supports the secure implementation of data portability rights. Together, these options highlight both the right granted to individuals and a key security measure that supports this right. Why other options are incorrect: - C. The ability to transfer data to any cloud provider without restrictions: This misrepresents GDPR's provisions, which do not guarantee unrestricted data transfers but rather the right to portability under certain conditions. - D. The requirement to store data in multiple locations: This pertains to data redundancy and backup strategies, not to the rights of individuals under GDPR's data portability clause. - E. Both A and B: While A is a best practice, it is not a requirement under the data portability clause, making this option partially incorrect.
Author: LeetQuiz Editorial Team
Ultimate access to all questions.
No comments yet.
In the context of the General Data Protection Regulation (GDPR), 'data portability' is a key right granted to individuals. Considering a scenario where a user wishes to switch from one online service provider to another, which of the following best describes the significance of 'data portability' under GDPR? Please choose the two most accurate options.
A
The obligation for organizations to encrypt all personal data during transfer to ensure security and prevent unauthorized access.
B
The right of individuals to receive their personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller without hindrance.
C
The unrestricted ability for individuals to transfer their personal data to any cloud service provider globally, without any limitations or compliance checks.
D
The requirement for data controllers to maintain copies of personal data in multiple geographical locations to ensure data redundancy and availability.
E
Both A and B