ISC2 Certified Cloud Security Professional (CCSP) Practice Question
A U.S. retailer is adding an online storefront that will collect personally identifiable information (PII) from customers in mainland China, the European Union, Canada and California. Designers want to copy all customer records to an existing analytics data lake that resides only in a U.S. public-cloud region. Which privacy law is most likely to mandate that PII gathered within its jurisdiction be stored domestically or undergo a government security assessment before it can be transferred abroad, making the proposed design non-compliant?
Canada's Personal Information Protection and Electronic Documents Act (PIPEDA)
European Union General Data Protection Regulation (GDPR)
People's Republic of China Personal Information Protection Law (PIPL) and related cyber-security regulations
China's Personal Information Protection Law (PIPL), together with the earlier Cybersecurity Law and Data Security Law, imposes data-localization obligations on critical information infrastructure operators and organizations processing large volumes of Chinese personal data. These rules require that such data be stored within mainland China and that any cross-border transfer pass a state-run security assessment. GDPR, PIPEDA and the CCPA all regulate international transfers but do not impose a strict domestic-storage mandate; instead they allow transfers when appropriate contractual or other safeguards are in place. Therefore, the Chinese legislation is the primary blocker for an architecture that moves all data to the United States.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is data localization under PIPL?
Open an interactive chat with Bash
How does PIPL differ from GDPR in cross-border data transfer requirements?
Open an interactive chat with Bash
What is the scope of 'critical information infrastructure' under Chinese laws?
Open an interactive chat with Bash
ISC2 Certified Cloud Security Professional (CCSP)
Legal, Risk and Compliance
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .