Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.
exam questions

Exam CIPP-E All Questions

View all questions & answers for the CIPP-E exam

Exam CIPP-E topic 1 question 31 discussion

Actual exam question from IAPP's CIPP-E
Question #: 31
Topic #: 1
[All CIPP-E Questions]

Article 5(1)(b) of the GDPR states that personal data must be “collected for specified, explicit and legitimate purposes and not further processed in a way incompatible with those purposes.” Based on Article 5(1)(b), what is the impact of a member state’s interpretation of the word “incompatible”?

  • A. It dictates the level of security a processor must follow when using and storing personal data for two different purposes.
  • B. It guides the courts on the severity of the consequences for those who are convicted of the intentional misuse of personal data.
  • C. It sets the standard for the level of detail a controller must record when documenting the purpose for collecting personal data.
  • D. It indicates the degree of flexibility a controller has in using personal data in ways that may vary from its original intended purpose.
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Ssourav
4 months, 1 week ago
Selected Answer: D
D. It indicates the degree of flexibility a controller has in using personal data in ways that may vary from its original intended purpose. GDPR Article Reference: Article 5(1)(b): Personal data shall be collected for specified, explicit, and legitimate purposes and not further processed in a manner that is incompatible with those purposes. Further processing for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes shall, in accordance with Article 89(1), not be considered incompatible with the initial purposes.
upvoted 1 times
...
aliblabla
7 months, 3 weeks ago
If you want to process data for another purpose then afgreed on, this new purpose has first to be agreed on before processing the data according to that new purpose
upvoted 1 times
...
aliblabla
7 months, 3 weeks ago
d is wrong because the GDPR tries to prevent that Controllers us the data for anything other then the specified purpose. Check clause 5 GDPR. So C is the answer.
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...