Exam CIPP-E topic 1 question 103 discussion

The answer is B, recital 38 - The consent of the holder of parental responsibility should not be necessary in the context of preventive or counselling services offered directly to a child.

B. When providing preventive or counselling services to the child: This is correct. The GDPR allows for the processing of children's data without parental consent in situations where it is necessary for the provision of preventive or counselling services offered directly to a child. This exception acknowledges the importance of accessing such services without barriers.

Recital 38: 'Children merit specific protection with regard to their personal data, as they may be less aware of the risks, consequences and safeguards concerned and their rights in relation to the processing of personal data. Such specific protection should, in particular, apply to the use of personal data of children for the purposes of marketing or creating personality or user profiles and the collection of personal data with regard to children when using services offered directly to a child. The consent of the holder of parental responsibility should not be necessary in the context of preventive or counselling services offered directly to a child.'

Its B. see Recital 38