Q: 4
What is the MAIN reason GDPR Article 4(22) establishes the concept of the “concerned supervisory
authority”?
Options
Discussion
Seriously, I wish IAPP would stop making these options so similar to real exam trip-ups. D.
Probably D, since B is a bit of a trap. It's about representing data subjects outside the lead authority's area.
A is wrong, D. The concept of 'concerned supervisory authority' mainly exists so that data subjects outside the lead authority's country still get represented. Quick question though: if the scenario only involves data subjects within the lead authority's state, would there even be a 'concerned' authority at all?
Probably D-concerned supervisory authority is about making sure data subjects outside the lead’s own patch still have someone representing their interests. Not all about establishment or local processing. Makes sense to me, but open to debate!
A is definitely not right here. Had something like this in a mock and D was correct.
Be respectful. No spam.