An organization processing personal data of a person living in the EU must comply with which of the following principles?
A)Processed for extended purposes.
B)Adequate, relevant, and not excessive.
C)Processed without the accordance of data subject's rights.
D)All of these.

Question

Quizplus · Accepted Answer

The principle of adequacy, relevance, and not excessiveness is one of the fundamental principles of GDPR which requires that the personal data collected should be adequate, relevant, and not excessive for the purposes for which they are processed.

Option A is incorrect as GDPR mandates that the personal data should be processed only for specified, explicit and legitimate purposes.

Option C is wrong as GDPR provides a range of rights to data subjects which includes the right to access, rectify, erasure, and restrict processing of their personal data.

An Organization Processing Personal Data of a Person Living in the EU