Which of the following must the company do to ensure GDPR compliance?

A company is preparing to deploy a global service.

Which of the following must the company do to ensure GDPR compliance? (Choose two.)
A . Inform users regarding what data is stored.
B . Provide opt-in/out for marketing messages.
C . Provide data deletion capabilities.
D . Provide optional data encryption.
E . Grant data access to third parties.
F . Provide alternative authentication techniques.

View Answer

Answer: A, C

Explanation:

The main rights for individuals under the GDPR are to:

allow subject access

have inaccuracies corrected

have information erased

prevent direct marketing

prevent automated decision-making and profiling

allow data portability (as per the paragraph above)

source: https://www.clouddirect.net/11-things-you-must-do-now-for-gdpr-compliance/

These are two of the requirements of the GDPR (General Data Protection Regulation), which is a legal framework that sets guidelines for the collection and processing of personal data of individuals within the European Union (EU). The GDPR also requires data controllers to obtain consent from data subjects, protect data with appropriate security measures, notify data subjects and authorities of data breaches, and appoint a data protection officer.