nerdexam
IAPP

CIPM · Question #111

Under the General Data Protection Regulation (GDPR), which situation would be LEAST likely to require a Data Protection Impact Assessment (DPIA)?

The correct answer is D. An online magazine using a mailing list to send a generic daily digest to marketing emails. See the full explanation below for the reasoning.

Question

Under the General Data Protection Regulation (GDPR), which situation would be LEAST likely to require a Data Protection Impact Assessment (DPIA)?

Options

  • AA health clinic processing its patients' genetic and health data
  • BThe use of a camera system to monitor driving behavior on highways
  • CA Human Resources department using a tool to monitor its employees' internet activity
  • DAn online magazine using a mailing list to send a generic daily digest to marketing emails

How the community answered

(43 responses)
  • A
    2% (1)
  • B
    12% (5)
  • C
    5% (2)
  • D
    81% (35)

Community Discussion

No community discussion yet for this question.

Full CIPM Practice