What is GDPR and one major principle it enforces?

What is GDPR and one major principle it enforces?

• A. The General Data Protection Regulation; data minimization and purpose limitation.
• B. The Global Data Protection Regulation; mandatory data retention and auditing.
• C. The Government Data and Privacy Regulation; universal consent and export controls.
• D. The General Data and Privacy Rule; open data and public access.

Answer: (A)

GDPR stands for General Data Protection Regulation, an EU regulation that governs how personal data is collected, stored, used, and shared. A central principle it enforces is data minimization and purpose limitation. Data minimization means collect only what you truly need for the specific purpose at hand, avoiding unnecessary data. Purpose limitation means you should use the data only for the explicit, legitimate purposes you stated when you collected it, and not for other uses without a lawful basis. This combination protects privacy by reducing the amount of data collected and ensuring data isn’t repurposed without consent or justification. GDPR also covers transparency, consent, individual rights, security, and breach notification. The other options misstate the acronym or describe practices not considered core GDPR principles—such as mandatory data retention, universal consent, or open data—so they don’t fit.

GDPR stands for General Data Protection Regulation, an EU regulation that governs how personal data is collected, stored, used, and shared. A central principle it enforces is data minimization and purpose limitation. Data minimization means collect only what you truly need for the specific purpose at hand, avoiding unnecessary data. Purpose limitation means you should use the data only for the explicit, legitimate purposes you stated when you collected it, and not for other uses without a lawful basis.

This combination protects privacy by reducing the amount of data collected and ensuring data isn’t repurposed without consent or justification. GDPR also covers transparency, consent, individual rights, security, and breach notification. The other options misstate the acronym or describe practices not considered core GDPR principles—such as mandatory data retention, universal consent, or open data—so they don’t fit.