Which of the following statements are true in relation to the GDPR? Select all that apply.

A. Organizations are required to upgrade policies and procedures so that data is protected.
B. If an organization does not charge for goods or services, they do not need to comply.
C. Every organization is required to have a data protection officer.
D. The full name of an individual is considered to be personal data and needs the same level of protection as an identification number.



Answer :

Final answer:

Under GDPR, organizations must upgrade policies for data protection, the need for a data protection officer varies, and full names are considered personal data.


Explanation:

Organizations are required to upgrade policies and procedures to ensure data protection under GDPR. Every organization is not required to have a data protection officer; it depends on the nature and scale of data processing activities. The full name of an individual is indeed considered personal data and requires the same level of protection as identification numbers under GDPR.


Learn more about General Data Protection Regulation (GDPR) here:

https://brainly.com/question/30812316