What is considered a personal data processing for the General Data Protection Regulation (GDPR)?

The correct answer is B. Creating a backup with records of names, addresses, enrollment of students. Anonymized data is not under the scope of the GDPR, nor are data from deceased persons. Organizations that handle only this type of data do not need to conform to the GDPR. Anonymized data reads data that is not possible to reverse in order to identify the data subject. There…

Data processing and consent

Question

Options

AAnalysis of data regarding the cause of death in the last 10 years.
BCreating a backup with records of names, addresses, enrollment of students.
CConducting analysis of personal data related to health issues, but which have previously been
DStatistical publication with intention to vote, help anonymously.

How the community answered

(15 responses)

B
93% (14)
D
7% (1)

Explanation

Anonymized data is not under the scope of the GDPR, nor are data from deceased persons. Organizations that handle only this type of data do not need to conform to the GDPR. Anonymized data reads data that is not possible to reverse in order to identify the data subject. There is also pseudonymized data, in which case it is possible to perform the reversal and identify the data holder.

Topics

#personal data processing#GDPR definitions#data processing activities#personal data

Community Discussion

No community discussion yet for this question.

Full PDPF Practice