nerdexam
IAPP

CIPP-E · Question #32

Under Article 21 of the GDPR, a controller must stop profiling when requested by a data subject, unless it can demonstrate compelling legitimate grounds that override the interests of the individual.

Sign in or unlock CIPP-E to reveal the answer and full explanation for question #32. The question stem and answer options stay visible for context.

Compliance with European Data Protection Law

Question

Under Article 21 of the GDPR, a controller must stop profiling when requested by a data subject, unless it can demonstrate compelling legitimate grounds that override the interests of the individual. In the Guidelines on Automated individual decision-making and Profiling, the WP 29 says the controller needs to do all of the following to demonstrate that it has such legitimate grounds EXCEPT?

Options

  • ACarry out an exercise that weighs the interests of the controller and the basis for the data
  • BConsider the impact of the profiling on the data subject's interest, rights and freedoms.
  • CDemonstrate that the profiling is for the purposes of direct marketing.
  • DConsider the importance of the profiling to their particular objective.

Unlock CIPP-E to see the answer

You've previewed enough free CIPP-E questions. Unlock CIPP-E for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#Article 21 objection#legitimate grounds#profiling#WP29 guidelines
Full CIPP-E Practice