Bird
0
0

A company claims it does not need to comply with GDPR because it is based outside the EU. What is the error in this reasoning?

medium🧠 Conceptual Q6 of 15
Cybersecurity - Compliance and Governance
A company claims it does not need to comply with GDPR because it is based outside the EU. What is the error in this reasoning?
AGDPR applies to companies processing EU residents' data regardless of location
BGDPR only applies to companies physically located in the EU
CGDPR applies only to government organizations
DGDPR applies only if data is stored in the EU
Step-by-Step Solution
Solution:
  1. Step 1: Understand GDPR territorial scope

    GDPR applies to any company processing personal data of EU residents, no matter where the company is located.
  2. Step 2: Analyze the options

    Only GDPR applies to companies processing EU residents' data regardless of location correctly states GDPR's extraterritorial reach. Others misunderstand its scope.
  3. Final Answer:

    GDPR applies to companies processing EU residents' data regardless of location -> Option A
  4. Quick Check:

    GDPR scope = Applies beyond EU borders [OK]
Quick Trick: GDPR protects EU residents' data globally [OK]
Common Mistakes:
MISTAKES
  • Thinking GDPR applies only inside EU
  • Believing only governments are covered
  • Assuming data location matters more than residency

Want More Practice?

15+ quiz questions · All difficulty levels · Free

Free Signup - Practice All Questions
More Cybersecurity Quizzes