IAPP Exam CIPP-E Topic 2 Question 68 Discussion

Actual exam question for IAPP's CIPP-E exam

Question #: 68
Topic #: 2

Article 9 of the GDPR lists exceptions to the general prohibition against processing biometric dat

a. Which of the following is NOT one of these exceptions?

AThe processing is done by a non-profit organization and the results are disclosed outside the organization.

BThe processing is necessary to protect the vital interests of the data subject when he or she is incapable of giving consent.

CThe processing is necessary for the establishment, exercise or defense of legal claims when courts are acting in a judicial capacity.

DThe processing is explicitly consented to by the data subject and he or she is allowed by Union or Member State law to lift the prohibition.

Show Suggested Answer

Suggested Answer: B

by Sabra at Mar 29, 2023, 01:26 PM

Limited Time Offer

25%

Off

Get Premium CIPP-E Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Cornell

1 months ago

Ah, the GDPR - the gift that keeps on giving when it comes to tricky exam questions. *shakes head*

upvoted 0 times

...

Felicidad

1 months ago

Wait, the GDPR has exceptions for biometric data processing? I thought it was supposed to be ironclad! *chuckles*

upvoted 0 times

...

Loren

1 months ago

D has to be the correct answer. If the data subject explicitly consents and the law allows it, then the processing is permitted.

upvoted 0 times

Edda

1 days ago

C) The processing is necessary for the establishment, exercise or defense of legal claims when courts are acting in a judicial capacity.

upvoted 0 times

...

Bulah

5 days ago

B) The processing is necessary to protect the vital interests of the data subject when he or she is incapable of giving consent.

upvoted 0 times

...

Buddy

22 days ago

A) The processing is done by a non-profit organization and the results are disclosed outside the organization.

upvoted 0 times

...

2 months ago

Option A doesn't seem right. The GDPR has strict requirements for non-profit organizations processing biometric data, even if it's disclosed outside the organization.

upvoted 0 times

Brent

2 months ago

B) The processing is necessary to protect the vital interests of the data subject when he or she is incapable of giving consent.

upvoted 0 times

...

Eve

2 months ago

A) The processing is done by a non-profit organization and the results are disclosed outside the organization.

upvoted 0 times

...

Krissy

3 months ago

I think the answer is A.

upvoted 0 times

...