Exam CIPP-E topic 1 question 44 discussion

Actual exam question from IAPP's CIPP-E

Question #: 44
Topic #: 1

Under Article 21 of the GDPR, a controller must stop profiling when requested by a data subject, unless it can demonstrate compelling legitimate grounds that override the interests of the individual. In the Guidelines on Automated individual decision-making and Profiling, the WP 29 says the controller needs to do all of the following to demonstrate that it has such legitimate grounds EXCEPT?

A. Carry out an exercise that weighs the interests of the controller and the basis for the data subject’s objection.
B. Consider the impact of the profiling on the data subject’s interest, rights and freedoms.
C. Demonstrate that the profiling is for the purposes of direct marketing.
D. Consider the importance of the profiling to their particular objective.

Show Suggested Answer

Suggested Answer: C 🗳️

by Ssourav at July 26, 2024, 5:33 a.m.

Comments

Submit Cancel

Ssourav

4 months ago

Selected Answer: C

C. Demonstrate that the profiling is for the purposes of direct marketing. Profiling for direct marketing purposes is specifically mentioned in Article 21(2) of the GDPR as an area where data subjects have the right to object, and controllers must respect this objection. Demonstrating that the profiling is for direct marketing would not constitute compelling legitimate grounds that override the data subject’s interests, rights, and freedoms.

upvoted 1 times

...

Exam CIPP-E All Questions

View all questions & answers for the CIPP-E exam

Exam CIPP-E topic 1 question 44 discussion

Comments

Ssourav

Get IT Certification

New Version GCP Professional Cloud Architect Certificate & Helpful Information

The 5 Most In-Demand Project Management Certifications of 2019