A promoter runs a ticketing operation and collects personal data from fans. Under what circumstance would a Data Protection Officer (DPO) be required under GDPR?
-
A
When the business processes personal data at large scale as a core activity or processes special categories of sensitive data systematically
-
B
Whenever the business sells tickets to EU residents, regardless of scale
-
C
Only if the business is headquartered within the European Union
-
D
When annual revenue exceeds โฌ10 million