Exin Exam PDPF Topic 5 Question 33 Discussion

Actual exam question for Exin's PDPF exam

Question #: 33
Topic #: 5

[All PDPF Questions]

The General Data Protection Regulation (GDPR) allows processing of personal data only for purposes explicitly permitted by law. A tax advisor wants to file income tax returns for a neighbor.

Which of the legitimate grounds in the GDPR applies?

AProcessing of the personal data is permitted in this case with explicit consent of the data subject.

BProcessing of the personal data is permitted because this is necessary for compliance with a legal obligation to which the controller is subject.

CProcessing of personal data is permitted in the course of a purely personal or household activity.

Show Suggested Answer

Suggested Answer: D

Data protection and privacy are complementary, but not the same thing.

A very repeated phrase is: ''It is possible to have security without privacy, but it is not possible to have privacy without security''.

Privacy is a right that must be protected, and Data Protection are the measures that will be used to achieve this protection.

by Justine at Oct 24, 2022, 03:45 AM

Limited Time Offer

25%

Off

Get Premium PDPF Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Salome

2 months ago

Wait, my neighbor's a tax advisor? Lucky duck. I wish I could just hand off my returns to them. Although, maybe I should double-check they're following the GDPR - don't want any surprises from the data protection authorities!

upvoted 0 times

...

Sheron

2 months ago

Ah, the joys of data protection regulations. At least it's not as complicated as filing my own taxes - that's what I've got an advisor for! As long as they pick the right GDPR ground, I'm happy.

upvoted 0 times

Curt

1 months ago

C) Processing of personal data is permitted in the course of a purely personal or household activity.

upvoted 0 times

...

Arlene

2 months ago

B) Processing of the personal data is permitted because this is necessary for compliance with a legal obligation to which the controller is subject.

upvoted 0 times

...

Latrice

2 months ago

A) Processing of the personal data is permitted in this case with explicit consent of the data subject.

upvoted 0 times

...

Rex

3 months ago

I was leaning towards A, but now I'm reconsidering. The GDPR is pretty strict about legal grounds for processing, so B does seem like the safest option here. Can't go wrong with following the law!

upvoted 0 times

...

Rozella

3 months ago

Hmm, I'm not sure. The data subject is a neighbor, so I wonder if C could apply since this could be considered a personal or household activity. But I suppose the tax filing part makes it more of a professional obligation.

upvoted 0 times

Shayne

2 months ago

I think B is the correct answer because it's necessary for compliance with a legal obligation.

upvoted 0 times

...

Joanna

2 months ago

B) Processing of the personal data is permitted because this is necessary for compliance with a legal obligation to which the controller is subject.

upvoted 0 times

...

Melvin

2 months ago

A) Processing of the personal data is permitted in this case with explicit consent of the data subject.

upvoted 0 times

...

Elin

3 months ago

I think the correct answer is B. The tax advisor is processing the personal data to comply with their legal obligation to file tax returns, so that seems like the most applicable legitimate ground under the GDPR.

upvoted 0 times