Article 5(1)(b) of the GDPR states that personal data must be "collected for specified, explicit and legitimate purposes and not further processed in a way incompatible with those purposes." Based on Article 5(1)(b), what is the impact of a member state's interpretation of the word "incompatible"?

• A.It dictates the level of security a processor must follow when using and storing personal data for two different purposes.
• B.It indicates the degree of flexibility a controller has in using personal data in ways that may vary from its original intended purpose.
• C.It guides the courts on the severity of the consequences for those who are convicted of the intentional misuse of personal data.
• D.It sets the standard for the level of detail a controller must record when documenting the purpose for collecting personal data.

Comment: *

Name: *

Email: *

Verification: *

Which aspect of the GDPR will likely have the most impact on the consistent implementation of data protection laws throughout the European Union?

• A.That it essentially functions as a one-stop shop mechanism
• B.That it takes the form of a Regulation as opposed to a Directive
• C.That it makes notification of large-scale data breaches mandatory
• D.That it makes appointment of a data protection officer mandatory

Comment: *

Name: *

Email: *

Verification: *