IAPP
AIGP · Question #66
A company is creating a mobile app to enable individuals to upload images and videos, and analyze this data using ML to provide lifestyle improvement recommendations. The sign-up form has the followin
The correct answer is A. Purpose Limitation and Data Minimization.. Collecting more personal data than necessary violates GDPR principles of Purpose Limitation (using data only for specific purposes) and Data Minimization (collecting only what is needed).
Legal and Regulatory Landscape
Question
A company is creating a mobile app to enable individuals to upload images and videos, and analyze this data using ML to provide lifestyle improvement recommendations. The sign-up form has the following data fields: 1. First name 2. Last name 3. Mobile number 4. Email ID 5. New password 6. Date of birth 7. Gender In addition, the app obtains a device's IP address and location information while in use. What GDPR privacy principles does this violate?
Options
- APurpose Limitation and Data Minimization.
- BAccountability and Lawfulness.
- CTransparency and Accuracy.
- DIntegrity and Confidentiality.
How the community answered
(35 responses)- A71% (25)
- B3% (1)
- C9% (3)
- D17% (6)
Explanation
Collecting more personal data than necessary violates GDPR principles of Purpose Limitation (using data only for specific purposes) and Data Minimization (collecting only what is needed).
Topics
#GDPR#data minimization#purpose limitation#privacy principles
Community Discussion
No community discussion yet for this question.