Which regulation governs how personal data of EU residents can be collected, stored, and processed?

Which regulation governs how personal data of EU residents can be collected, stored, and processed?

• A. General Data Protection Regulation; it governs privacy for all data
• B. Global Data Protocol Rules
• C. General Data Protection Regulation; it governs how personal data of EU residents can be collected, stored, and processed, affecting global companies
• D. Government Data Privacy Regulation

Answer: (C)

The main idea is understanding which rule shapes how personal data of people in the EU can be handled. The General Data Protection Regulation (GDPR) is the EU-wide law that specifies how personal data may be collected, stored, and processed, including requirements around consent, purpose limitation, data minimization, data subject rights, and breach notification. It also has extraterritorial reach, meaning it applies to organizations outside the EU if they process EU residents’ data, so it can affect global companies. Other options don’t fit because there isn’t a widely recognized “Global Data Protocol Rules,” and a vague “Government Data Privacy Regulation” isn’t specific. Also, describing privacy as applying to all data is inaccurate—the GDPR focuses on personal data, not every bit of information.

The main idea is understanding which rule shapes how personal data of people in the EU can be handled. The General Data Protection Regulation (GDPR) is the EU-wide law that specifies how personal data may be collected, stored, and processed, including requirements around consent, purpose limitation, data minimization, data subject rights, and breach notification. It also has extraterritorial reach, meaning it applies to organizations outside the EU if they process EU residents’ data, so it can affect global companies.

Other options don’t fit because there isn’t a widely recognized “Global Data Protocol Rules,” and a vague “Government Data Privacy Regulation” isn’t specific. Also, describing privacy as applying to all data is inaccurate—the GDPR focuses on personal data, not every bit of information.