CIPP/E: Certified Information Privacy Professional/EuropeDemo

By IAPP · Question Mode

QuestionQ177

European Data Processing

When Ben directs the company to collect additional customer data, the most serious GDPR violation occurs because processing that data created what?

  • A An information security risk by copying the data into a new database.
  • B A potential legal liability and financial exposure from its customers.
  • C A significant risk to the customers’ fundamental rights and freedoms.
  • D A significant risk due to the lack of an informed consent mechanism.
Explanation

Processing sensitive personal data, including political opinions and philosophical beliefs, on a large scale creates a high risk to data subjects’ fundamental rights and freedoms. GDPR Article 35 specifically identifies large-scale processing of Article 9 special-category data as processing likely to result in that high risk and requiring a data protection impact assessment.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!