CIPP-E Question #146: Real Exam Question with Answer & Explanation

Question

Options

• ABody temperature is not considered personal data.
• BThe practice does not involve completion by automated means.
• CBody temperature is considered pseudonymous data.
• DThe practice is for the purpose of alleviating extreme risks to public health.

Explanation

According to the GDPR, personal data means any information relating to an identified or identifiable natural person. Body temperature is a type of personal data that can reveal information about an individual's health and therefore constitutes special category data under Article 9 of the GDPR. However, not every activity involving personal data falls within the scope of the GDPR. The GDPR applies only to the processing of personal data wholly or partly by automated means or to the processing other than by automated means of personal data which form part of a filing system or are intended to form part of a filing system. In this scenario, the organization conducts body temperature checks as a part of COVID-19 monitoring. Body temperature is measured manually and is not followed by registration, documentation or other processing of an individual's personal data. This means that the organization does not use any automated means to collect, store, or process the body temperature data, nor does it create or intend to create a filing system that contains such data. Therefore, this practice does not involve any processing of personal data within the meaning of the GDPR and is not subject to its rules and obligations.

No community discussion yet for this question.