CCSP Legal, Risk, and Compliance Practice Question
A multinational company headquartered in the US processes personal data of EU data subjects using a cloud service provider hosted in Singapore. Under GDPR, which legal mechanism is most appropriate for lawful transfer of personal data from the EU to Singapore?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Standard Contractual Clauses (SCCs)
GDPR requires an appropriate safeguard for transfers to third countries without an adequacy decision. Standard Contractual Clauses (SCCs) are a common mechanism.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Standard Contractual Clauses (SCCs)
Why this is correct
SCCs are approved by the European Commission and can be used as a transfer mechanism to a cloud provider in a non-adequate country.
- ✗
Binding Corporate Rules (BCRs)
Why it's wrong here
BCRs are for intra-group transfers, not specifically for transfers to a cloud provider in a third country.
- ✗
Adequacy decision by the European Commission
Why it's wrong here
Singapore does not have an adequacy decision from the EU.
- ✗
Data Protection Agreement (DPA) with the cloud provider
Why it's wrong here
A DPA is required between controller and processor but does not alone legitimize cross-border transfers.
Go deeper
Related to this question
About these practice questions
One of 964 original CCSP practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CCSP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CCSP exam.