OneTrust Certified Privacy Professional Practice Exam

What aspect of data processing is emphasized by the GDPR's principle of accountability?

1. Minimization of data collection

2. Data deletion

3. Demonstrating compliance with data protection laws

4. Enforcement of penalties

The correct answer is: Demonstrating compliance with data protection laws

The principle of accountability under the General Data Protection Regulation (GDPR) emphasizes the requirement for organizations to demonstrate their compliance with data protection laws. This principle mandates that organizations not only implement appropriate data protection measures but also maintain evidence of these measures and be prepared to explain how they are ensuring the protection of personal data. Accountability entails actively managing data processing activities and being transparent about processes and data handling practices. It goes beyond simply following regulations; it requires organizations to show that they are taking responsibility for their data processing operations, which includes maintaining records, conducting assessments, and being open to audits. While other aspects of data protection, such as data minimization, deletion, and potential penalties, are also important to GDPR, the central focus of accountability is on the proactive demonstration of compliance with these standards and laws. This means organizations must be able to articulate how they meet their obligations under the GDPR to effectively protect personal data.