Discuss IAPP CIPP/E Exam Topic 1 Question 107

How does the GDPR now define ''processing''?

AAny act involving the collecting and recording of personal data.

BAny operation or set of operations performed on personal data or on sets of personal data.

CAny use or disclosure of personal data compatible with the purpose for which the data was collected.

DAny operation or set of operations performed by automated means on personal data or on sets of personal data.

Suggested Answer: B

The GDPR defines processing as ''any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction'' (Article 4(2)). This is a broad definition that covers almost any activity involving personal data, regardless of the method or means used. The GDPR also specifies that processing should be lawful, fair and transparent, and should respect the principles of data protection by design and by default (Article 5).Reference:CIPP/E Certification - International Association of Privacy Professionals,Free CIPP/E Study Guide - International Association of Privacy Professionals, [GDPR - EUR-Lex]

I hope this helps. If you have any other questions, please let me know.

Get Premium CIPP/E Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

13 comments · newest first

Antonio 10 months ago

Really? Seems like a lot to cover under "processing."

Cassie 11 months ago

Definitely B! It covers all bases.

Fernanda 11 months ago

B is the correct choice, no doubt about it!

Gaynell 11 months ago

I thought it was just about collecting data, but it’s way broader!

Jerry 11 months ago

Processing includes any operation on personal data.

Fausto 12 months ago

I thought processing included automated means, but I can't recall if that was just for specific cases. Maybe option D?

Goldie 12 months ago

I feel like option C could be a trick answer since it mentions compatibility with the purpose. Processing seems more technical.

Marci 1 year ago

I'm not entirely sure, but I remember something about operations on data being key. Wasn't there a similar question in our practice exam?

Reita 1 year ago

I think "processing" is broader than just collecting data, so I might lean towards option B.

Kenneth 1 year ago

Ugh, I'm drawing a blank on the GDPR definition of "processing." I'll have to guess and hope for the best on this one.

Queen 1 year ago

Okay, I remember learning that the GDPR has a very expansive definition of "processing" that goes beyond just collecting and recording data. I'm pretty confident option B is the correct answer.

Josephine 1 year ago

Hmm, this seems like a tricky one. I'm not totally sure about the GDPR definition, but I'll give it my best shot and try to eliminate the options that don't seem quite right.

Argelia 1 year ago

I think the GDPR definition of "processing" is pretty broad, so I'll need to carefully read through the options to identify the most comprehensive one.

IAPP CIPP/E Exam - Topic 1 Question 107 Discussion