A compliance intern asks whether the GDPR replaced the Charter right to protection of personal data. Which clarification is correct?
Select an answer to reveal the explanation.
Short Explanation
Think constitution upstairs, detailed rulebook downstairs. The Charter’s right to data protection stays in the fundamental-rights attic; the GDPR is the thick operating manual that makes protection concrete for controllers and processors. The manual did not demolish the attic.
Full Explanation
The Charter of Fundamental Rights of the European Union recognises protection of personal data as a fundamental right. The GDPR elaborates enforceable rules for processing but does not repeal or replace that constitutional-level right. ISO standards lack constitutional rank under the Treaties/Charter, and the Charter is central to European—not CIPP/US—analysis.