Under the newly enacted Digital Data Protection Directive (DDPD), any corporation that processes biometric data must designate a specialized compliance officer, unless the corporation operates exclusively in the healthcare sector. Furthermore, all corporations designated as "high-volume data handlers" process biometric data. However, a recent survey of the healthcare sector reveals that no healthcare corporation currently employs a specialized compliance officer, even though some healthcare corporations are high-volume data handlers. Finally, any corporation that employs a specialized compliance officer is subject to annual independent audits.
Based on the information provided above, which of the following statements are most strongly supported? (Select all that apply)
- Any corporation that is a high-volume data handler but does not operate exclusively in the healthcare sector is subject to annual independent audits.Answer
- At least some corporations that process biometric data do not employ a specialized compliance officer.Answer
- CAny corporation that is subject to annual independent audits must process biometric data.
- DMost corporations that do not employ a specialized compliance officer operate exclusively in the healthcare sector.
- EHealthcare corporations are exempt from the specialized compliance officer requirement because their data processing practices are already heavily regulated.