CompTIA Security+ SY0-701 Practice Question

The General Data Protection Regulation is a comprehensive data privacy framework that imposes strict rules on data protection and privacy for individuals within the European Union. As it is one of the strictest privacy and security laws in the world, adopting GDPR-compliant policies will likely ensure compliance with a wide range of international data protection standards. The regulation requires businesses to protect the personal data and privacy of EU citizens for transactions that occur within EU member states. Additionally, because the GDPR has extraterritorial applicability, meaning it applies to organizations outside the EU that process data of EU residents, adhering to its standards can help a multinational corporation align with global data protection regulations. The other options are either regional, not globally focused (like the Federal Information Security Act), industry-specific (such as the Shipping Port Security Act), or more limited in scope with regards to data protection (for example, the International Sales of Goods Act).