Question 1: Which of the following regulations is critical in disaster recovery?

• General Data Protection Regulation (GDPR) (Correct answer)
• Sarbanes-Oxley Act
• Health Insurance Portability and Accountability Act (HIPAA)
• Payment Card Industry Data Security Standard (PCI DSS)

Correct answer: General Data Protection Regulation (GDPR)

The General Data Protection Regulation (GDPR) is critical in disaster recovery because it imposes strict requirements for protecting personal data. Organizations must ensure that their data recovery plans comply with GDPR principles, such as data integrity, confidentiality, and the lawful processing of personal information, even after a disruptive event. Non-compliance can lead to significant fines and reputational damage.