CompTIA Security+ SY0-701 (V7) Practice Question

The General Data Protection Regulation (GDPR) is a comprehensive data privacy framework that imposes strict rules on data protection and privacy for individuals within the European Union. As it is one of the strictest privacy and security laws in the world, adopting GDPR-compliant policies will likely ensure compliance with a wide range of international data protection standards. The regulation requires businesses to protect the personal data and privacy of EU citizens. Additionally, because the GDPR has extraterritorial applicability, meaning it applies to organizations outside the EU that process data of EU residents, adhering to its standards can help a multinational corporation align with global data protection regulations. The other options are either national and not globally focused (like the Federal Information Security Management Act), industry-specific (such as acts related to shipping port security), or limited in scope with regards to data protection (for example, the United Nations Convention on Contracts for the International Sale of Goods).