A logistics firm confuses the GDPR with a voluntary industry code of conduct. Which characterisation is correct?
Select an answer to reveal the explanation.
Short Explanation
A voluntary code is a handshake; the GDPR is law with rights, supervisors, and real fines. Logistics teams that treat it like a nice-to-have charter are setting themselves up for a hard landing. Binding regulation — full stop.
Full Explanation
The GDPR is an EU regulation that is binding in its entirety and directly applicable in Member States. It creates enforceable rights for data subjects and provides for supervisory enforcement, including administrative fines where conditions are met. Voluntary codes of conduct can support compliance under the Regulation, but they do not convert the GDPR itself into optional soft law.