A.The European Parliament

B.The European Commission

C.The Article 29 Working Party

D.The European Council

A.The group of undertakings must be comprised of organizations of similar sizes and functions.

B.The data protection officer must be easily accessible from each establishment where the undertakings are located.

C.The data protection officer must be located in the country where the data controller has its main establishment.

D.The group of undertakings must obtain approval from a supervisory authority.

A.Convention 108.

B.Universal Declaration of Human Rights.

C.General Data Protection Regulation.

D.EU Directive on Privacy and Electronic Communications.

A.To ensure that the data protection officer acts as the sole point of contact for individuals' questions about their personal data.

B.To provide resources necessary to carry out the defined tasks of the data protection officer and to maintain his or her expert knowledge.

C.To ensure that the data protection officer receives sufficient instructions regarding the exercise of his or her defined tasks.

D.To submit for approval to the data protection officer a code of conduct to govern organizational practices and demonstrate compliance with data protection principles.

A.The size of any data processor involved.

B.The nature, sensitivity and volume of personal data.

C.The ease of identification of individuals.

D.The special characteristics of the data controller.