Examkin

Soru

Zorluk: OrtaData Privacy and Compliance Regulations

A cloud engineer managing a web application for an international company receives an official request from an account holder residing in France who wants all of their profile details, search query history, and stored preferences permanently deleted from company databases. Which data privacy regulation directly obligates the organization to fulfill this specific request?

  1. General Data Protection Regulation (GDPR) right to erasureCevap
  2. B
    Payment Card Industry Data Security Standard (PCI-DSS) storage limitation requirement
  3. C
    Health Insurance Portability and Accountability Act (HIPAA) minimum necessary standard
  4. D
    Family Educational Rights and Privacy Act (FERPA) record disclosure exception

Cevap

General Data Protection Regulation (GDPR) right to erasure
The General Data Protection Regulation (GDPR) applies to personal data processing of individuals located in the European Union. Its 'right to erasure' (or right to be forgotten) grants individuals the legal right to request the permanent deletion of their personal data from an organization's systems.

Adım Adım Çözüm

1
Identify the data subject and jurisdiction described in the scenario
The user resides in France (European Union), establishing jurisdiction under European data privacy legislation.
Data privacy requirements depend heavily on the geographic location of the individual whose data is being processed.
2
Analyze the nature of the request
The request asks for permanent deletion of personal account details, query history, and preferences.
Determines which specific data subject right or regulatory mandate is being invoked.
3
Map the request and jurisdiction to the appropriate regulatory directive
The GDPR right to erasure (right to be forgotten) explicitly covers deletion requests for EU citizens' personal data.
GDPR grants EU data subjects specific controls over their personal data, including removal upon request when processing is no longer required.

Anahtar Kavram

GDPR Data Subject Rights and Right to Erasure
Tahmini Süre:1m 15s
Bu soruyu puanla

Konular

Data Privacy and Compliance Regulations

Bu konudan daha fazla soru