CISSP Asset Security Practice Question
A company collects PII from European customers for order processing. Under GDPR, they engage a third-party logistics provider to handle shipping. Which role does the logistics provider typically assume in this scenario?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Data processor
A data processor processes personal data on behalf of the data controller (the company). The logistics provider handles data for shipping but does not determine purposes or means.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Data controller
Why it's wrong here
The company is the controller, not the logistics provider.
- ✗
Data custodian
Why it's wrong here
Data custodian is an internal role, not a GDPR-defined role for third parties.
- ✓
Data processor
Why this is correct
Correct. The logistics provider is a data processor processing data on behalf of the controller.
- ✗
Data subject
Why it's wrong here
The data subject is the individual whose data is processed.
Go deeper
Related to this question
Learn chapter
Asset Security: Privacy and Data Retention
Key term
Data controller
An entity that determines the purposes and means of processing personal data.
Key term
GDPR
The General Data Protection Regulation (GDPR) is a European Union law that sets strict rules for how organizations collect, store, process, and protect the personal data of individuals within the EU.
About these practice questions
One of 747 original CISSP practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CISSP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CISSP exam.