Article 9 of the GDPR lists exceptions to the general prohibition against processing biometric dat a. Which of the following is NOT one of these exceptions?
In the event of a data breach, which type of information are data controllers NOT required to provide to either the supervisory authorities or the data subjects?
When would a data subject NOT be able to exercise the right to portability?
Which mechanism, new to the GDPR, now allows for the possibility of personal data transfers to third countries under Article 42?
What is the most frequently used mechanism for legitimizing cross-border data transfer?